Ensure IT Compliance - Interpret and analyze audit comments on system data security to ensure that the auditor’s recommendations are implemented.- Review corporate security policy and guidelines, and implement those which are applicable locally.- Review security profiles periodically to ensure the profiles are up-to-date and the access level/authority is properly granted to the authorized users.- Work with users/developers to meet compliance in business requirements.Review Security Plan for application implementation- Formulate and revise security policy to ensure system and data integrity. For example, the password for System ID should be owned by business users not application developer.User ID sanctioning- Grant the approved request for new IDs or resource access authority and any changes, which include various platforms/databases such as Mainframe, AS/400, UNIX, Oracle, Sybase, Windows NT/2000, Active Directory and SQL.Review Audit Logs/Reports- Review security violation reports, access control logs and change list, and make the appropriate action according to the provisions of the security policy and guidelines.IT Project related to Security- To manage project related to data security such as Centralized Security Logs in which logs from all platforms are extracted to one server.Documentation

March 2002 – September 2002 (Policy/M Support Executive)Prepare AS/400 POLICY/M documentation and AS/400 programmingSeptember 2002 (Technical Support Executive) – January 2007 (System Administrator)PC & End-User Problem Troubleshooting for internal staffs and agentsLAN/WAN Network and System Administration- Prepare server health checklist (daily) for Wintel (inclusive of Active Directory), Linux and AS/400 machines, hence to ensure the availability of the systems is in good condition and attend to the production problem when required.- Monitor network traffic and troubleshoot network problem.- Coordinate with email vendor to resolve spam mail issue.- Coordinate with Intruder Detection System vendor in addressing external attacks at the Demilitarized Zone (DMZ) level.- Ensure the anti-virus file definition is up to date and servers along with PC workstations are scanned regularly to avoid virus threats (Symantec -> F-Secure).- Administrate and monitor Internal (Unix) & External Firewall (WatchGuard) rules and settings (security).- Implement VLAN (Virtual Private Network) on existing LAN (Local Area Network) via Cisco switch- Operating System: Windows Server 2000, Windows Server 2003, Linux (Red Hat Enterprise Linux)- Application: Email (Squirrel Mail), POLICY/M (AS/400), ClaimsGTS, PIAM VPN, DHCP, Symantec Anti-virus, F- Secure Anti-virus and othersSecurity Administration- Acts as secondary AS/400 System administrator in POLICY/M application on sanctioning. - Handle email administration and intranet portal administration (SiteForum)- Handle group policy and administrating Active Directory (AD)- Prepare Security Policy guidelines on existing network infrastructure and system security.Handle Disaster Recovery Exercise- Performing Disaster Recovery exercise at remote siteDealing with vendors (Hardware and Software)