Jack K.L. C. Email & Phone Number

Hong Kong

Hong Kong Sar

Hong Kong Sar

Cybersecurity Assessment/ Audit Service Lead:- Acted as an engagement leader for cybersecurity audits and independent regulatory compliance assessments for banking clients. It encompasses the HKMA C-RAF and SPM, including TM-E-1, TM-G-1, TM-G-2, SA2, etc.- Led multiple Cybersecurity Maturity Assessments related to ISO 27001 and NIST Cybersecurity Framework, as well as regulatory-driven technical security reviews for brokers and insurers. This included leading investigations in response to security breaches or service outages.- Led engagements centered around on-premises and cloud architecture security design and configuration audit/ reviews, assessing the effectiveness of implemented security solutions, such as DLP, SIEM, UEM, SASE, etc., and developing IT strategy and roadmaps aligned with the organization's goals and objectives.Security Operations SME:- Championed critical cybersecurity uplifts impacting the entire organization, significantly enhancing defensive capabilities and reducing vulnerabilities.- Built robust relationships with c-suite executives and senior management to align security initiatives with business goals, facilitating proactive risk management and securing budget for security projects.Deputy Head of Technology Risk Management:- Previously held a secondment position as the Head of Technology Risk Management at a Chinese bank. Provided leadership and oversight in critical areas, including technology risk process review, risk assessment, and security policy enhancement. Responsible for providing technology dashboard updates to the bank's management in the Risk Management Committee.Department Head of Cybersecurity and Technology Risk:- Managed the department’s operations, including hiring, training, evaluating staff, and fostered a collaborative work environment.

Hong Kong Sar

Oversaw Security Projects:- Oversaw a diverse range of IT security projects, taking charge of critical tasks such as conducting feasibility studies, subject matter research, budget planning, product selection, architecture design, project planning, resource mobilization, milestone tracking, quality assurance, and providing user training.- Managed relationships with external IT vendors and service providers.Led Security Operations Excellence:- Led and mentored a team focused on driving security operations excellence, covering key areas that include:1)Oversee the maintenance of the IT security infrastructure, ensuring the system reliability, security, and scalability.2)Conduct security tollgate reviews for releases and changes, encompassing tasks such as vulnerability assessments, compliance reviews, and device hardening & user account management reviews.3)Perform security rule reviews for critical network components, ensuring adherence to security standards and best practices.4)Manage security systems, SIEM, PAM, and vulnerability management systems.5)Investigate, follow up, escalate, and report security incidents.- Took on the responsibility of spearheading ongoing security enhancement initiatives, incorporating the following key responsibilities:1)Govern the effectiveness of implementing preventive controls by reviewing and formulating security policies and procedures, while actively collaborate with IT teams to establish a robust layered defense framework.2)Construct a vulnerability management architecture to conduct vulnerability assessments for over 1000 hosts, provide recommendations for system hardening, and ensure efficient collaboration with stakeholders for effective vulnerability management.3)Implement and maintain Jira for tracking and ensuring timely completion of remediation programs.4)Enhance and maintain the SOC, involving the development of new use cases for security log correlation & monitoring, as well as the analysis of the TI.

Hong Kong Sar

Security Solution Project Delivery:- Effectively managed the delivery of security and infrastructure solutions across diverse industries, including but not limited to DLP, IDS/IPS, WAF, SIEM, NGFW, AV, and email security gateway.- Oversaw the successful delivery of enterprise 2FA and SSO solutions specifically tailored for the banking and financial sector.- Led and executed notable projects, including:1)Successfully implemented a robust 2FA solution to safeguard high-risk transactions in Internet banking for a sizable Chinese bank.2)Accomplished a seamless upgrade of the endpoint solution, encompassing over 200 endpoint (disk) encryption clients, for a Bureau of the HK Government.Security Consulting Services Delivery:- Delivered comprehensive security risk assessment and audit services to various clients, including HKSAR Government's bureau and departments, as well as commercial enterprises spanning different industries.- Conducted thorough reviews of IT security policies, performing gap analyses against regulatory requirements to ensure compliance and identify areas of improvement.- Orchestrated impactful security awareness training programs, which involved creating training materials, quizzes, and conducting post-training evaluations for Government's bureau and departments.- Achieved remarkable milestones, including:1) Successfully completed sizable bi-yearly departmental security risk assessment exercises for over 200 information systems/applications within two large Departments of the HK Government.2)Conducted engaging security awareness training seminars, reaching over 2000 staff members within a large Department of the HK Government.

Hong Kong Sar

ICT Solutions Delivery Manager:- Successfully managed the delivery of ICT solutions for diverse industries, encompassing IP data and wireless networks, as well as unified communications such as IP telephony systems.Enterprise Solutions Delivery Manager:- Currently responsible for managing the delivery of DCS (Data Center Solutions), BCP (Business Continuity Planning), and DR (Disaster Recovery) solutions for enterprise clients.

Master Of Business Administration - Mba

Bachelor'S Degree, Information Engineering

Associate'S Degree, Computer Studies