Simon Chan Email & Phone Number

St. Louis, Missouri, Us

St. Louis, Missouri, Us

Cybersecurity risk management, strategy, enterprise security operations, regulatory subject matter expert in corporate key initiatives.• Spearheading information security, privacy, and data protection requirements on Electronic Medical Records (EMR) and Practice Management Systems.• Liaising with cross IT and business functions on security and Business Continuity Plan (BCP) requirements for cloud application and infrastructure deployments.• Advising on strategic information security services to support company growth and program maturity in the areas of cloud security, threat intelligence, and risk management.

Chesterfield, Missouri, Us

Leadership & Management highlights• Spearheaded global cybersecurity and privacy risk discovery, analysis, treatment, and ERM reporting to maintain a continuous enterprise cyber risk management program.• Held increased levels of leadership positions throughout the company’s growth that delivered programs and initiatives addressing complex global regulatory compliance, emerging cyber risks, and digital transformation enablement. • Extensive experience dealing with global cybersecurity and data protection laws and regulatory certifications that successfully remediated business interruptions and operationalized risk treatment activities to address compliance. • Established second line of defense core risk functions including policy governance, incident response plans, and practical risk management services including third parties and M&A due diligence to ensure risks are identified, measured, and treated prior to business investments. • Established cybersecurity risk quantification assessments on potential financial loss on cybersecurity scenarios to justify investments, prioritization, cyber insurance coverage, and solvency risk estimations to executive leadership and BOD.

St. Louis, Mo, Us

Leadership Highlights• Provided leadership, management advisory, and expertise on business aspects of information security areas including policy creation, technical control safeguards, and industry best practices.• Designed and implemented solutions that enabled company compliance with industry regulatory standards: HIPAA & HITECH Security, SOX, and Payment Card Industry - PCI.• Designed and implemented critical security architectures and technologies: Identity Management provisioning, Role Based Access Control (RBAC), Data Loss Prevention (DLP) infrastructure, Risk Based Authentication, Laptop Encryption, Secure Messaging, Data De-identification services, and MFA for online client portal access.• Transformed company's Fraud Analysis Management system.• Established repeatable, scalable, and flexible security architecture frameworks; Middleware security for CORBA and MQ Series, Resource Access Decision for application data level security, Data De- identification methodology and service, user Global Unique Identifier, and Role Based Access Control frameworks.

Leadership & Management highlights• Established and led Influence’s Information Security consulting team to execute client engagements in the areas of Information Security Management, Vulnerabilities and Threat Management, External Pen Testing, and Application Security.• Managed company's Information Technology (IT) operations and infrastructure services to meet client hosting SLAs. • Recruited and trained new consultants to deliver consistent quality security consulting services, including establishment of deliverable frameworks and methodologies.

St. Louis, Mo, Us

• Architected, designed, and implemented the company’s first enterprise-wide Stateful Inspection firewalls, intrusion detection systems, Internet proxy gateways, and a two-factor authentication remote access service; technologies that defined the company’s network security parameter.• Designed and deployed security technologies that helped increase productivity and reduce costs, such as delivering the company’s first international VPN infrastructure, and deploying secure RADIUS remote access for technical administrators to provide global mobile remote support.• Led the network security team that provided threat countermeasures, vulnerability assessments and remediation, investigations, forensics, and incident response management services.• Represented Information Security in change management and enterprise architecture review board meetings to ensure security standards were followed, and risks were identified.

St. Louis, Mo, Us

• Designed, built, and implemented the company’s first Internet web infrastructure with high availability, security, centralized content management, and traffic load balanced for customers to navigate information about company's brokerage services and manage their investment portfolios online.• Customized and deployed Intranet web infrastructure and tool sets that empowered the company to “web enable” their applications. Accomplishments also included deployment of the company’s first locked-down desktop and terminal HTTP browsers to all computer users.• Assisted Edward Jones's Network Security department to maintain and administer network perimeter security (SideWinder, Cisco screen routers) infrastructure.• Built, configured, and administered all company's Internet application systems: web, HTTP cache, DNS and Digital Certificate servers.