Johnson Phang Email & Phone Number

Dallas, Texas, United States

New York, New York, United States

Implemented and enforced an Access Control Policy using Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) to minimize unauthorized access and ensure compliance in user access reviews. Established a Data Classification and Handling Policy to secure sensitive data by categorizing records by confidentiality level, enhancing data handling compliance and monitoring. Designed and executed an Incident Response Policy that included monthly phishing and malware simulation exercises, improving incident response efficiency and threat identification capabilities. Rolled out an Acceptable Use Policy (AUP) with guidelines on appropriate IT resource usage, reducing non-compliant software installations and minimizing IT security-related support needs. Enhanced the Password Management Policy by implementing password complexity and rotation standards across the organization to increase security around password use. Launched a Security Awareness Training Program featuring quarterly training sessions and monthly phishing simulations, promoting employee engagement and reducing susceptibility to phishing. Developed and enforced a BYOD Policy requiring encryption, antivirus software, and remote wipe capabilities, ensuring security for personal devices used for work purposes. Created an Encryption Policy mandating encryption for data at rest and in transit, securing sensitive communications and improving data protection compliance. Implemented a Backup and Disaster Recovery Policy with regular data backups and recovery testing, ensuring data availability and minimizing potential data loss during incidents.Skills:Access Control ManagementData Classification & HandlingIncident Response Planning & ManagementSecurity AwarenessAcceptable Use Policy DevelopmentPassword Management & Security PoliciesEncryption Standards (Data at Rest & in Transit)Backup & Disaster Recovery (DRP)Compliance & Risk Management

Sheridan, Wyoming, United States

Developed a comprehensive procedure for bulk purchasing exclusive products using StellarAIO, improving user satisfaction by incorporating key tools such as proxies, virtual private servers, cookie generation, and bypass techniques.Contributed to StellarAIO’s rapid growth in user base, revenue, and monthly subscriptions within a year, aided by clear, easy-to-follow documentation that established the company as a leader in retail automation software.Oversaw a remote team of QA Engineers, optimizing support through comprehensive GitBook documentation for over 40 modules, resulting in a 75% reduction in support tickets.Recruited and managed a remote team of skilled Support Engineers based in the Philippines, ensuring 24/7 support coverage for StellarAIO and Stella Proxies, further enhancing customer experience and operational efficiency.

Richardson, Texas, United States

Curated comprehensive Business Continuity (BC) and IT Disaster Recovery (ITDR) documentation, establishing readiness across IT assets and developing Disaster Recovery (DR) plans with offsite replication for critical infrastructure. Managed and standardized 100+ ITDR workstations with secure configurations, policies, and regular compliance checks.Led the transition of 100+ employees to remote work during COVID-19, implementing secure BYOD and MDM solutions, which established a secure framework for personal devices and streamlined support. Delivered training on BC, ITDR, secure access, and data protection, enhancing compliance and reducing security-related support needs.Defined Access Control Policies using Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) to enforce least privilege, while implementing Data Classification standards and Incident Response protocols to protect sensitive data and ensure efficient incident handling. Launched Acceptable Use and Password Management Policies, strengthening security through complexity requirements and reducing unauthorized access.Executed ongoing Security Awareness Training, including phishing simulations, to foster a security-conscious workforce. Enforced encryption standards for data at rest and in transit, and maintained Backup and Disaster Recovery strategies with defined recovery objectives, safeguarding data integrity and business continuity.Ensured ongoing PCI-DSS compliance by implementing and maintaining secure payment card data handling processes, conducting regular vulnerability assessments, and performing compliance audits to safeguard sensitive financial information and mitigate risks.

Bachelor Of Science - Bs, Cybersecurity And Information Assurance

Bachelor Of Science - Bs, Information Technology And Systems

Cybersecurity Course Relevancy: - ITSS 4360 Network and Information Security With the advances in information technology, the security.

Associate Of Science - As, Liberal Arts And Sciences, General Studies And Humanities