James Lam Email & Phone Number

*Designing a user awareness program tailored to your local environment and observed user behaviour for addressing specific threats and monitor or measure its effectiveness via KPI (training completion rate, number of incident reports, rate of clicked on unsafe links. Reduced a great number of phishing incidents or compromised id cases. * Reviewing a contract with a Managed Security Service Provider (MSSP) involves assessing various aspects of the agreement, including service delivery processes and Key Performance Indicators (KPIs). Clarify and support onboard procedure , review and fine-tune escalation procedure of an incident response, threat intelligence sharing and continuous improvement. Improved security posture and reduced surfaces of attack, reduced waste resources.*Reviewing security controls for their effectiveness and fit for purpose is essential for ensuring that they adequately protect your organisation while also enhancing user experience. If one was not suitable then develop Selection Criteria for Security Controls that are effectiveness in threat mitigation, usability, scalability, compatibility, cost effectiveness and compliance. Conducted in-depth investigations into fraud and insider threats, maintaining close collaboration with local law enforcement.*Performing an internal audit based on the MITRE ATT&CK framework by evaluating our existing security controls to determine how effectively they detect, prevent, and respond to the tactics and techniques outlined in the MITRE ATT&CK framework. Map current controls to ATT&CK techniques, gaps analysis and review incident response plan.*Attending regular vendor review meetings is a strategic way to strengthen our cybersecurity posture and build a collaborative relationship with vendors, discussing incident trends, challenges, action items, performance metrics, threat landscape updates, industry best practices and service feedback.

Team Lead | Core Banking Systems SupportLed a dedicated team responsible for the support and maintenance of the bank's core banking systems, fostering a culture of collaboration, skills-sharing, and celebrating team achievements. Key contributions include:* Policy Alignment & Compliance: Regularly reviewed and ensured alignment with organisational mission, objectives, and values, focusing on legal, regulatory, and contractual compliance.* Governance & Standardisation: Periodically assessed policies, standards, and guidelines, particularly following major changes or acquisitions to enhance their relevance to our environment, providing feedback and recommending improvements.* Benchmarking & KPI Management: Established best-practice baselines to measure key performance indicators (KPIs), ensuring we met business objectives and maintained accountability.* Risk Management: Conducted risk assessments, identifying gaps and evaluating potential impacts on business continuity. Developed cost-effective risk treatment strategies and monitored implementation for continuous improvement.* Documentation & Knowledge Sharing: Created a centralised repository for team artefacts and documentation, promoting easy access and reference.* Threat Analysis & Mitigation: Proactively assessed system vulnerabilities and formulated treatment plans to mitigate risks, ensuring secure and resilient operations. Facilitated lessons learned for ongoing improvement.* Clear Communication: Presented technical information clearly, tailoring language to suit the audience's needs, enhancing understanding across teams.* Resource Optimisation: Strategically allocated resources with diverse skill sets to meet business goals within budget and timeframe, delivering high-standard results.* Data Privacy & Confidentiality: Safeguarded sensitive customer information, restricting access to authorised personnel only.

(Department of Health and Ageing, Medicare, Department of Veterans' Affairs, Qantas, Energy Australia)* Demonstrated strict adherence to governance policies and industry best practices in delivering IT services across multiple sectors. Key responsibilities and achievements include:* Governance & Compliance Reporting: Delivered high-level security briefings to governance and compliance committees, providing insights for executive decision-making.* Policy Documentation & Updates: Regularly reviewed and updated security documents to reflect evolving organisational policies and standards.* Audit Readiness & Process Improvement: Developed comprehensive checklists to minimise errors, enhancing data accuracy and ensuring preparedness for audits.* Incident Response & Prevention: Conducted incident reviews and root cause analysis to address issues, implementing proactive measures to prevent recurrence.* Change Management: Actively participated in weekly change management board meetings, assessing technical changes and their impact on business units.* Documentation & Training: Created clear, structured documentation for diverse audiences, providing training that explained both procedural steps and underlying principles.* Cross-functional Collaboration: Worked closely with different teams to ensure optimal customer outcomes, seeking and applying specialist input when needed.* Innovation & Efficiency: Researched and assessed tools and technologies to improve operational efficiency and effectiveness.* Gap Analysis & Compliance Audits: Conducted regular gap analysis using industry standards (ISO27001 and NIST 800 Series), ensuring the internal security program aligned with best practices.* Tailored Training for Global Teams: Delivered training sessions to overseas colleagues, adapting content to address cultural differences and varied technical backgrounds.