Jeffrey Chan

Jeffrey Chan Email and Phone Number

Head of Technology and Cyber Risk Governance @ GXS Bank
Jeffrey Chan's Location
Singapore, Singapore
About Jeffrey Chan

Seasoned Technology professional with 20+ years of experience in securing and optimizing IT landscapes. Proven track record in leading cross-functional teams, implementing MAS TRM risk framework, and driving risk mitigation across diverse domains including multi-cloud environments, Gen AI, software development, DevSecOps, infrastructure management, and service delivery.Presently, serving as the Head of Technology and Cyber Risk Governance at GxS Bank, where I collaborate with a diverse array of stakeholders as a Line 2 Risk management function to balance stakeholder business objectives with the organization's risk appetite.

Jeffrey Chan's Current Company Details
GXS Bank

Gxs Bank

View
Head of Technology and Cyber Risk Governance
Jeffrey Chan Work Experience Details
  • Gxs Bank
    Head Of Technology And Cyber Risk Governance
    Gxs Bank May 2024 - Present
    Singapore, Singapore
    - Risk Gov: Develop and execute the digital bank's tech, cyber, and AI risk governance framework, aligning it with business objs and MAS regulations.- Risk Assessment/Mitigation: Lead the identification, assessment, and prioritization of tech, cyber, and AI risks specific to the digital banking environment. Implement effective risk mitigation strategies, with a focus on MAS reqs for operational resilience, outsourcing, and customer data protection.- Policy & Framework: Establish and maintain comprehensive policies, standards, and procedures for managing tech, cyber, and AI risks, ensuring compliance with MAS regulations. Co-drive a robust AI governance framework addressing ethical considerations, model risk management, and explainability.- Compliance Oversight: Ensure adherence to internal policies, industry best practices, and all relevant MAS regulations, including those for TRM, Cybersecurity, Outsourcing, and PDPA.- Third-Party Risk Management: Assess and manage technology, cyber, and AI risks associated with third-parties, in line with MAS Outsourcing Guidelines.- Tech & AI Risk Gov: Provide expert guidance on emerging technology and AI risks and their implications for the digital bank.- Cybersecurity & AI Awareness: Foster a strong cybersecurity and AI ethics culture throughout the organization, including training on MAS regulations and guidelines.- Reporting & Comms: Provide regular reports to senior management and the Board on the state of technology, cyber, and AI risk. Ensure timely reporting of significant risk events and issues to MAS and other stakeholders.- People & Leadership: Build & lead a high-performing team capable of operating in a fast-paced digital bank. Foster a culture of collaboration & experimentation, enabling the bank to adopt cutting-edge solutions while managing risks effectively.- Bank Audit: Successfully led the team through stringent MAS audits, consistently demonstrating a strong security posture in critical areas.
  • Gic
    Head Of Cloud Services, Ai Innovation And Transformation
    Gic Jun 2022 - May 2024
    Singapore
    - Pioneered AI-Driven Solutions: Led a cross-functional team to successfully deliver GIC's first internal chat assistant based on Large Language Model (LLM) technology. Collaborated with Line 2 Risk to establish a comprehensive AI risk management framework, addressing data privacy, security, bias, and other potential concerns.- Championed Responsible AI Adoption: Played a pivotal role in the GIC AI Council, guiding the rational use of AI across GIC. Developed and implemented a robust ROI framework to continuously evaluate the impact and effectiveness of AI-driven projects.- Led High-Performing Cloud Team: Fostered a culture of innovation, collaboration, and continuous learning within cloud team. Partnered with stakeholders across GIC to adopt cloud platforms, leveraging AI capabilities for real-time insights and data-driven decision-making.- Shaped Cloud & AI Strategy: Collaborated with the leadership team to define and execute GIC's cloud and AI technology roadmap. Embraced emerging technologies like LLMOps, ensuring alignment with GIC's overarching mission and vision.- Established LLM Operational Excellence: Championed the development of GIC's LLMOps standards, leading the implementation of high-performing LLM pipelines. Seamlessly integrated LLMs with existing infrastructure, and established rigorous quality and performance monitoring practices to guarantee ongoing reliability and effectiveness.- Ensured Cloud Security & Compliance: Defined and enforced a robust cloud risk framework, encompassing continuous monitoring of cloud-related risks, including data breaches, access control vulnerabilities, and misconfigurations. Oversaw regular cloud audits and adherence to regulatory obligations.- Implemented Line 1 Risk Management: Led the implementation of first-line IT risk mgt practices, proactively identifying and mitigating technology risks, establishing IT control monitoring to ensure ongoing compliance with internal policies and external regulations.
  • Income
    Senior Manager, Hybrid Cloud
    Income Mar 2020 - May 2022
    Singapore, Singapore
    - Led Cloud Transformation with MAS Compliance: Spearheaded the development and enforcement of robust cloud operation policies, standards, and processes, ensuring full adherence to MAS TRM guidelines.- Established Cloud Governance Framework: Drove the implementation of a comprehensive Cloud governance framework, defining clear processes and roles to enforce MAS compliance within existing workflows, prioritizing customer data safety and protection – critical for both regulatory compliance and company reputation.- Strategic Cloud Leadership: Set the strategic direction for Cloud Operations, Cloud Center of Excellence, and Cloud Security, establishing a cloud reference architecture embedded with "secure by design" principles that adhered to MAS TRM, driving compliance by default.- Cultivated a DevSecOps Culture: Fostered a cultural shift towards secure and efficient IaC and software delivery on the cloud. Integrated security best practices into the entire development lifecycle, promoting collaboration between development, operations, and security teams. - Instituted DevSecOps pipeline discipline, automating security checks to ensure code quality and minimize security risks.- Ensured MAS Audit Success: Successfully led the team through stringent external MAS cloud audits, consistently demonstrating a strong security posture in critical areas like access control, encryption, cyber defenses, and regulatory compliance.- L1 Risk Governance: Assumed L1 risk governance responsibilities, identifying and mitigating potential risks related to cloud operations, ensuring alignment with MAS TRM guidelines and NTUC Income's risk appetite.- Technical Leadership & Digital Transformation: Provided leadership and technical advice to business users, technical staff, and vendors on the adoption of strategic digital transformation frameworks and standards. Promoted the use of emerging technologies and contributed to the overall digital strategy of the organization.
  • Moneysmart Group
    Information Security, Cloud And Devops Operations Lead
    Moneysmart Group Dec 2018 - Feb 2020
    Singapore
    - Led Information Security Operations: Established and led a new Info Security Ops team, providing direction and mentorship to a team of security engineers.- Implemented Security Framework: Established comprehensive security policies, standard operating procedures (SOPs), and security standards aligned with ISO 27001, ensuring compliance and reducing enterprise risk.- Drove Security Awareness & Compliance: Developed and implemented security awareness programs, introduced compliance metrics, and fostered a culture of security within the organization. Effectively changed the perception of security as a hindrance, leading to increased customer satisfaction.- Managed Security Projects: Led successful implementation of security projects, including intrusion detection and response systems, authentication token and VPN deployments, and vulnerability assessment and remediation programs. Conducted regular security audits and implemented enhanced controls and processes.- Led DevOps Transformation & Security Integration: Managed the regional DevOps team, championing the adoption of shift-left security practices, integrating security into development pipelines, and implementing continuous security monitoring of applications.- Managed Cloud Infrastructure Operations: Led a high-performing cloud infrastructure team, overseeing all aspects of operations, including production support, systems and database administration, configuration management, release management, incident management, problem management, business continuity, network operations, and cloud services.- Developed Strategic IT Roadmap: Collaborated with the CTO to develop strategic and tactical plans for IT, focusing on the future technology infrastructure and ensuring it aligned with the organization's business objectives and security requirements.
  • Thomson Reuters
    Application And Infrastructure Service Manager
    Thomson Reuters Jan 2012 - Nov 2018
    Global
    - Incident Management: Served as Global Incident Manager, setting the direction for service-related incidents and educating internal teams (L1/L2 support, development, product, etc.) on appropriate response procedures, following ITIL incident management guidelines.- Hybrid Cloud Support & Governance: Established new Hybrid Cloud escalation processes for Thomson Reuters' L1 Operations team, aligning with ITIL incident management best practices. Designed the Hybrid Cloud Support model, implemented project cost tracking, and developed Cloud asset tagging and integration with Thomson Reuters' corporate tools, contributing to overall service continuity management.- DevOps Transformation: Partnered with Product Development and Operations teams to adopt DevOps principles and practices, incorporating ITIL service design concepts. Drove initiatives to modernize development and operations workflows, introducing Microservices, Continuous Integration (CI), Continuous Deployment (CD), and Docker containers, ensuring efficient incident and problem management.- Led Cloud Migration & Adoption: Spearheaded the transition of Thomson Reuters applications onto Amazon Web Services (AWS), leading the design and implementation of "Permit to Build" and "Permit to Operate" processes to ensure smooth onboarding of new business unit applications to the cloud, while aligning with ITIL change management principles.- Vendor Management & Risk Mitigation: Proactively engaged with third-party contractors to assess service level agreements (SLAs), identify potential risks to services, and develop mitigation plans to ensure uninterrupted operations and business continuity.
  • Thomson Reuters
    Regional Software Developer/Support
    Thomson Reuters Oct 2009 - Mar 2012
    Singapore
    - Developed and enhanced financial software solutions: Collaborated with regional teams to design, develop, and maintain Thomson Reuters' financial software products, including Eikon, Elektron, Datascope and other desktop/web-based applications.- Customized solutions for regional markets: Adapted and localized product features to meet the specific needs of financial professionals in the Asia-Pacific region, ensuring compliance with local regulations and market practices.- Integrated data feeds and APIs: Integrated real-time market data feeds (e.g., Reuters Market Data System) and APIs into Thomson Reuters' products, enabling users to access critical financial information for analysis and decision-making.- Optimized performance and user experience: Improved the speed, reliability, and usability of Thomson Reuters' software products through code optimization, UI/UX enhancements, and rigorous testing.- Collaborated with cross-functional teams: Worked closely with product managers, QA engineers, and customer support representatives to gather requirements, resolve issues, and ensure timely product delivery.- Provided technical expertise: Served as a subject matter expert on Thomson Reuters' financial software, providing training and support to internal stakeholders and clients.
  • Hewlett-Packard
    Senior Software Engineer
    Hewlett-Packard Jan 2004 - Sep 2009
    Massachusetts Usa
    - Led development of HP's Itanium-based platform: Contributed to the design, development, and optimization of high-performance enterprise solutions leveraging HP's Itanium processors, achieving significant performance and reliability improvements.- Delivered enterprise orchestration software: Collaborated with cross-functional teams (product managers, UX designers, QA engineers) to develop feature-rich orchestration software that facilitated the management of complex, distributed applications within HP's enterprise IT infrastructure.- Specialized in Itanium architecture: Worked within a dedicated team to design and implement software solutions that maximized the unique capabilities of the Itanium architecture, such as its 64-bit instruction set and high-performance floating-point operations.- Fostered a culture of technical excellence: Mentored and coached junior developers, conducting code reviews, promoting best practices, and fostering a collaborative learning environment.- Championed Agile development: Advocated for and implemented Agile methodologies (e.g., Scrum) within the team, resulting in faster iterations, improved product quality, and increased responsiveness to evolving business needs.- Provided critical onsite customer support: Traveled to client sites to ensure seamless integration and deployment of custom software solutions, troubleshooting issues, and providing technical guidance to ensure customer success.
  • Hewlett-Packard
    Business Critical Consultant (Enterprise Division)
    Hewlett-Packard Mar 2000 - Dec 2003
    Massachusetts Usa
    - Consulted with enterprise clients to identify critical business challenges and align technology solutions with their strategic goals.- Designed and implemented tailored HP solutions leveraging servers (e.g., HP ProLiant), storage systems (e.g., HP StorageWorks), networking infrastructure (e.g., HP ProCurve), and software (e.g., HP OpenView) to address client-specific needs.- Led IT infrastructure modernization projects, migrating clients from legacy systems to HP's converged infrastructure offerings (e.g., HP BladeSystem) to enhance performance, scalability, and reliability.- Partnered with clients to implement business continuity and disaster recovery solutions, utilizing HP's data protection and replication technologies to ensure data availability and minimize downtime.- Managed IT service delivery engagements, overseeing the deployment, configuration, and optimization of HP hardware and software solutions to improve operational efficiency and reduce costs.- Provided technical guidance and support to client teams, ensuring smooth integration of new technologies and facilitating knowledge transfer to ensure successful adoption.- Developed and maintained strong relationships with key stakeholders, acting as a trusted advisor on HP's evolving product portfolio and industry best practices.- Stayed abreast of emerging technologies (e.g., virtualization, service-oriented architecture) and HP's evolving product offerings to provide relevant and informed recommendations.- Proactively identified and mitigated potential risks, including security vulnerabilities, performance bottlenecks, and operational disruptions, to ensure smooth business operations.
  • Citi
    Data Architect
    Citi Aug 1998 - Dec 1999
    New York, United States
    - Deliver scalable data solutions for global business intelligence (BI) and analytics needs.- Collaborated with senior stakeholders to define a strategic data roadmap aligned with business objectives, ensuring data architecture decisions supported long-term growth and flexibility.- Architected and implemented end-to-end data pipelines, integrating diverse data sources into a unified datalake.- Developed and maintained robust ETL processes to transform raw data into structured formats suitable for analysis, reporting, and visualization.- Developed and maintained enterprise data models, ensuring consistency, accuracy, and adherence to industry best practices.
  • Citigroup
    Regional Mis Manager (Business Intelligence)
    Citigroup Apr 1996 - Jul 1998
    Singapore
    - Led a team of data engineers in delivering scalable data solutions for Asia Pacific business intelligence (BI) and analytics needs.- Partnered with regional stakeholders across sales, marketing, finance, and operations to define key performance indicators (KPIs), identify data requirements, and design actionable insights to drive data-informed decision-making.- Architected and implemented end-to-end data pipelines, integrating diverse data sources into a unified datalake.- Developed and maintained robust ETL processes to transform raw data into structured formats suitable for analysis, reporting, and visualization.- Built and optimized data infrastructure components, including data warehouses, datamart, datalakes, ensuring efficient data storage, processing, and retrieval.- Championed data governance initiatives, establishing data dictionaries, lineage documentation, and quality assurance processes to ensure data accuracy, consistency, and compliance.- Leveraged advanced analytics techniques (e.g., statistical modeling, machine learning) to uncover trends, patterns, and correlations in complex datasets, delivering insights that informed strategic initiatives and operational optimizations.- Fostered a culture of continuous improvement by mentoring team members, promoting knowledge sharing, and staying abreast of emerging technologies and best practices in data engineering.

Jeffrey Chan Education Details

Frequently Asked Questions about Jeffrey Chan

What company does Jeffrey Chan work for?

Jeffrey Chan works for Gxs Bank

What is Jeffrey Chan's role at the current company?

Jeffrey Chan's current role is Head of Technology and Cyber Risk Governance.

What schools did Jeffrey Chan attend?

Jeffrey Chan attended National University Of Singapore, Princeton University, Umass Boston, Digipen Institute Of Technology, National University Of Singapore.

Not the Jeffrey Chan you were looking for?

Free Chrome Extension

Find emails, phones & company data instantly

Find verified emails from LinkedIn profiles
Get direct phone numbers & mobile contacts
Access company data & employee information
Works directly on LinkedIn - no copy/paste needed
Get Chrome Extension - Free

Aero Online

Your AI prospecting assistant

Download 750 million emails and 100 million phone numbers

Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.