•Managed continuous enhancement of technology policies for robust information security governance•Executed self-assessment programs, ensuring strict adherence to established information security policies•Led daily incident management, conducting thorough investigations into security breaches•Ensured alignment of significant business initiatives with information security policies•Acted as a key interface for regulatory matters, actively addressing audit findings across the business unit•Led the development and growth of a local information security team•Managed targeted staff training, including exercises such as phishing, and contributed to country-specific training content•Implemented vigilant monitoring of end-user devices, servers, and networks for potential security issues•Timely addressed and remediated identified vulnerabilities to maintain a high-security standard•Oversaw and managed projects related to data protection initiatives, ensuring the secure handling andsafeguarding of sensitive information, with a particular emphasis on compliance and best practices•Played a key role in the selection, onboarding, and ongoing management of security vendors, ensuring alignment with organizational needs•Implemented and enforced Azure-specific security measures, covering identity and access management, network security, encryption, logging, and compliance•Conducted comprehensive threat modeling for newly created projects, addressing infrastructure and application design to proactively identify and mitigate security threats

• Monitoring and Analyzing Network Traffics on IPS, WAF, WSA, Cisco FMC and block the malicious traffics at perimeter devices.• Maintain and update the control list of Minimum Baseline Security Standard checklist documents.• Reviewing all the artifacts of Windows Server, Linux Server, ESXi, Firewall, Switches, Routers, and DNS and report to customer which needs to meet the Minimum Baseline Security Standard base on ISO 27001.• Review and maintain the policies that are enactment in Ooredoo Myanmar.• Preparing vulnerability reports and investigating impact, resolution and verification of security vulnerabilities and patches performing deep dive and impact analysis into failed patch deployments• Conducted regular vulnerability assessments using Nessus Pro and Qualys to identify and analyze security weaknesses in systems, networks, and applications.• Utilized vulnerability scanning tools to prioritize threats based on severity, enabling the organization to focus on critical vulnerabilities for immediate remediation.• Collaborated with IT and security teams to develop and implement effective mitigation strategies to address identified vulnerabilities• Deployed TrendMicro EDR solutions to monitor, detect, and respond to potential cyber threats, enhancing the organization's incident response capabilities.• Utilized TrendMicro EDR to investigate security incidents, analyze root causes, and implement proactive measures to prevent future occurrences.• Actively participated in vulnerability management meetings, providing insights on the latest threats and recommending security best practices.• Prepared detailed vulnerability assessment reports, including findings, risk assessments, and mitigation recommendations, for management and technical teams.• Assisted in the development and maintenance of vulnerability management processes and procedures, ensuring compliance with industry standards and best practices.

• Monitoring Security Devices status and network infrastructure. • Monitoring the IPS, IDS and WAF. • Perform regular security monitoring to identify any possible intrusions.• Handling Technical support and Security incident tickets • Assessing the stability, security, and scalability of installed Windows systems.• Patching the system and servers.• Configuration and maintaining the Linux servers. • Providing technical support for staff and back-end system users.• Creating VPN users for staffs.• Managing user access. • Troubleshooting systems and servers’ errors.• Maintaining server architecture security and creating system backups.• Maintaining windows file server and users’ permission • Email creation on Zimbra server for users. • Configuring Kaspersky server and client communications• Participate in on-call escalation rotations for 24x7x365 support for security incidents.

• Reporting to the NOC Manager• Responsible for 24x7 Network Operations • Responsive to all incident reporting, NOC hotline calls and emails• Performs first-level troubleshooting and resolves or escalates to senior engineers• Managing major incidents escalation and reporting to regulatory• Create trouble tickets and provide timely updates till closure• Managing site access with building owners for fault rectification• Report and coordinate faults rectification with other operators and service providers• Support pre and post-network change activity, Generate daily network performance report• Support customer service team on services issues and feedback• Developed and implemented the network automating process using Python Language• Configuration of Cisco Firewalls and patched the Cisco Firepower Management Center• Participate in on-call escalation rotations for 24x7x365 support.• Maintain the Data Center according to PCIDSS

• Assisted in implementing of SIEM tools and monitored the client networks.• Reporting the client network vulnerabilities for better security.• Assisted the seniors to deeper analysis of detected events and troubleshooting.