Henry Jia Email & Phone Number

• Established the Bank’s Information Security Program: Developed a comprehensive program encompassing cybersecurity, access control and identity management, data security, and physical security.• Managed IT Risk Management Program: Implemented a dynamic IT risk management approach that includes continuous assessment of cybersecurity threats, establishing IT Key Risk Indicators (KRIs).• Created the Bank’s First IT and Cyber Incident Response Plan: Developed a scenario-based incident response plan detailing response steps and regulatory notification requirements.• Promoted Information Security Awareness: Fostered a culture of information security by providing employee training, conducting ongoing security-related communications, and performing bank-wide phishing simulation tests.• Third-Party IT Risk Management: Oversaw Information and cybersecurity risk of vendor engagements.• Managed Regulatory and Audit Compliance: Directed annual IT regulatory and audit examinations, including coordination with the head office audit team.• Led Security Operations: Monitored and managed cybersecurity intrusion traffic and alerts, reviewed bank-wide user access privileges, conducted firewall and configuration reviews, managed data loss prevention (DLP), remote access, patch management, and endpoint security.

Hk

Responsible for overseeing the Bank’s IT operation and its’ Information Security program. Reporting directly to the head of O&T and collaborate with various business units including Risk, Finance, Legal and Compliance on major IT and IS initiatives. Responsibilities include: • Develop Technology and Information Security Roadmaps. • Establish IT operation, security policies and procedures standard. • Provide subject matter expert feedback on monthly risk committee meetings and new product launch initiatives. • Chair IT Steering committee and present regular technology and security updates to senior management. • Ensure technology & security compliance with US Banking regulations include tracking and remediation of audit issues; vendor risk management; annual penetration testing; business continuity and incident response planning. • Manage external software vendors & developers to ensure business functional requirements and Bank’s security standard are met through out the Software Development Life Cycle (SDLC) include System Integration Testing, Stress Testing and User Acceptance Testing. • Oversaw IT finances include budgeting and forecasting; manage day-to-day IT operation include helpdesk support issue tracking, system upgrades and security patch management. • Conduct ongoing Data Loss Prevention (DLP) and Information Security training.Key Achievements: • Achieved zero security incidents in 2017 and 2018. • Successfully deployed data governance protocol for a multimillion dollar cross boarder system. • Significantly decreased annual technology spending by aggressively engaging competitors, streamline the procurement process, and renegotiate service contracts.

Singapore, Singapore, Sg

Aligned Information Security program with Federal Finanical Institution Examination Councile (FFIEC) IT handbooks. Collaborated with Bank’s Chief Compliance Officer and developed action plans and templates for reporting and tracking information security gaps from Self-Assessment, Audit, Risk Assessment, Vulnerability Assessments and Vendor Risk Management. Managed the Risk Assessment process to include asset inventory, system criticality, data classification, threat analysis and action plans. Provided strategic and tactical security guidance for all Technology projects, including the evaluation and recommendation of technical controls.Key Achievements: • Revamped the Information and Cyber Security program. • Reduced Information Security audit findings and achieved audit satisfactory ratings for 3 consecutive years. • Selected by the Bank CEO as the Information Security advisor to the FinTech innovation team, and made site visits to Silicon Valley startup companies.

Directed a worldwide team of 15+ iOS and web developers and product specialists throughout the project life cycle from conception, beta testing, to successful creation and launch of iOS mobile applications. Conducted project feasibility and adaptability business and market analyses. Developed frameworks for mobile application user interface. Key Achievements: • Created standard for functional requirements and programming specifications and reduced Software Development Life Cycle period significantly. • Apps showcased on Apple TV Ads, and achieved App Store top download leader.

New York, New York, Us

Provided network and system administration support for Pfizer’s pharmaceutical and animal health groups. Conducted Microsoft Certified Solutions Expert (MCSE) training for more than 50 network administrators and helpdesk support staff. Implemented system and software upgrade to local and international Pfizer locations.Key Achievements: • Championed the development of clinical studies medical translation software. • Successfully implemented enterprise-wide software solutions for Pfizer locations in Brazil, Germany, and Spain.

New York, New York, Us

Provided trading floor technical support for over 300 users. Performed daily oversight and data backup of critical trading system.Key Achievements:- Coordinated multiple trade floor moves and achieved completion ahead of schedules.- Received honorary mentions from executive traders for providing excellent one-on-one support.

Hartford, Connecticut, Us

-Generated analytical metric reports for help desk calls/issues-Managed local area network implementations, administration, and documentation-Wrote service and support documents.

New York, Ny, Us

Help desk support

New York, Ny, Us

Provided network and desktop support for the Astoria, Queens plant.

Armonk, New York, Ny, Us

Performed QA and script testing for the PC division