SlideShare a Scribd company logo
1 of 10
Curriculum Vitae
PERSONAL INFORMATION:
Name: CHAN Chiu Ming (Vincent)
Gender: Male
Nationality: Hong Kong Citizen / Singapore Permanent Resident
Email: receive4me@gmail.com (preferred contact)
Mobile Phone: +65-86708893 (Singapore)
+852-68569181 (Hong Kong)
Home phone: +852-23421986 (Hong Kong)
Languages: English, Mandarin Chinese (Putonghua) and Cantonese
EDUCATION:
• Bachelor of Engineering (Hons) in Computer Systems Engineering – University
of Warwick, UK (July 1993)
• Master of Business Administration in Finance and Investment – University of
Hull, UK (1998)
PROFESSIONAL AFFILIATIONS:
• Passed Chartered Financial Analyst (CFA) Level I exam in 2002
• Passed written exam of Cisco Certified Internetworking Expert (CCIE) for
routing and switching
• Passed ITIL Foundation (2011)
• Microsoft Certified Product Specialist for Windows (MCP ID: 260780)
• Netwise Certified Professional Software Developer for Middleware – Remote
Procedure Call (RPC)
Research and Development:
• Cyber/Internet/Digital bank without branches – Cyber/Internet/Digital banking,
aka, a FinTech company with bank license and banking services
• State of the art Cyber banking system WITHOUT IBM mainframe, Oracle
database and EMC storage, lower IT cost per customer bank account to 1 to 2 USD
• New breed banking system architecture– a distributed approach with massive
scalability, fast deployment and no data center relocation
• Mobile App Architecture
• Next generation datacentre design
PROFILE SUMMARY:
• Entrepreneur and innovation mind-set and founded/ran a start-up Technology
company for 10 years
• Excellent financial and cost analysis/control, and annual/project budget management,
with MBA degree and passed CFA Level 1 exam in 2002
• All-round IT technology profile including Data Center, Network, Voice, Cyber security,
Middleware, Microsoft Windows, Linux and banking application software development
• Sound working knowledge of Cyber security governance/management
framework(Total Visibility and Complete Control together with life cycle :assessment, gap
analysis, remediation planning, implementation roadmap and execution), corporate security
policy, security compliance (IT Security Audit), security technologies (Firewall, WAF,
IDS/IPS, WAF, Sandbox, Proxy, anti-DDOS, anti-virus), security operations: system
hardening, log review, security incident detection/management, mitigation/remediation,
Last Updated on 04/11/16 1/10
reporting and vulnerability/threat management (Vulnerability scanning, Penetration testing)
• Proven leader armed with over 20 years of global experience in establishing and
managing Network, Voice and Firewall Security Infrastructure policies/standards/operations
in key global markets, namely China, Hong Kong, Macau, Japan, Korea, Taiwan, Malaysia,
Singapore, Vietnam, Thailand, Indonesia, UAE, New Zealand, Australia, Luxembourg,
Netherland, Switzerland, Italy, Spain, Russia, Germany, UK, South Africa, Canada, USA,
Chile and Brazil – Have led up to 35 staff globally
• Working experience in highly demanded US investment bank and US bank with
diversified cultures, languages and races
• Well exposure to a dynamic working environment with continued corporate mergers
and acquisitions that evolved corporate technology standards/management
practice/roadmap for regional IT consolidation and integration to support business growth
• Tremendous project management experience with full project cycle starting from
business requirements, solution, costing, budgeting, planning, deployment, user acceptance
test, documentation and operation handover.
• Know-how in 3 types of audit and regulatory requirements from US, Singapore and
Hong Kong including risk management/control, data management/protection, security,
business continuity and so on.
WORK EXPERIENCE:
China Construction Bank, Hong Kong
Head of Network (Network / Voice / Cyber Security) June 2015 - Present
• In charge of network engineers supporting the International/Global network
infrastructure outside China, covering Hong Kong, Macau, Japan, Korea, Taiwan, Malaysia,
Singapore, Vietnam, UAE, New Zealand, Australia, Luxembourg, Netherland, Switzerland,
Italy, Spain, Russia, Germany, UK, South Africa, Canada, USA, Chile and Brazil, in addition
to 2 data centers in Hong Kong as international hub
• In charge of voice engineers supporting the international Cisco voice infrastructure
• In charge of security engineers supporting Cyber security infrastructure including
multiple brands of firewalls, IDS/IPS, Sandbox, Proxy, anti-DDOS, anti-virus and so on
• Manage annual budget of over 50 millions US dollars
• Responsible for Cyber security governance/management framework(Total Visibility
and Complete Control together with life cycle: assessment, gap analysis, remediation
planning, implementation roadmap and execution), corporate security policy, security
compliance (IT Security Audit), security technologies (Firewall, WAF, IDS/IPS, WAF,
Sandbox, Proxy, anti-DDOS, anti-virus), security operations: system hardening, log review,
security incident detection/management, mitigation/remediation, reporting and
vulnerability/threat management (Vulnerability scanning, Penetration testing)
• Govern security matters and safeguard network from intrusions, unauthorized access,
attacks, loopholes, phishing, threats, APT, viruses and malwares through Internet and/or
third party connections such as Bloomberg and Reuters
• Enforce best management and technology practices by focusing on improvement of
people, process and technology and by leveraging from previous international working
experiences
• Ensure all technology setup in compliance with corporate security policy, internal audit
and regulatory requirements from Hong Kong Monetary Authority
• Assume Full responsibilities of the International network, voice and firewall security
infrastructures including new initiatives, engineering design, project implementation and
24x7 operations support including, least but not last, incident/problem management, change
control/management, security management, circuit management,
Last Updated on 04/11/16 2/10
capacity/availability/performance/resilience management, disaster recovery/contingency
planning, design and configuration management, patch management, network
management/monitoring, asset management, vendor management, cost/budget
management and staff skill enhancement.
• Making sure that the network performance and reliability meet banking application
requirements including AML, OCBS, ODAS, HKICL, FTS, Risk Manager and so on.
• Responsible for office build-out of new overseas branches around the world
Key accomplishments:
- Proposed a new breed cyber banking system/services with a distributed architecture
but WITHOUT branches, IBM mainframe, Oracle database and EMC storage, for low IT
cost, massive scalability, fast deployment and no data center relocation
- Proposed a new solution to completely revamp the existing security infrastructure in
reacting to the latest development of cyber threats such as APT
- Successfully detected and protected the business from external attacks in South
Africa and Singapore
- Revised operations support framework by enforcing best management and technology
practices
Development Bank of Singapore (DBS), Singapore
Vice President Feb 2013 – May
2015
• In charge of the whole Operations support of both Network and Voice technology
infrastructure in Singapore
• Lead L3 technology support team to review and approve design and change, and to
troubleshoot production problems
• Lead L1 technology support team to provide first line support to production problem
and day to day operation support including circuit outages,auditing and maintenance review
• In charge of Voice Integration team for development of projects and new initiatives
• In charge of Voice Operation team for BAU operation support of a phone user base of
over 15,000, 2 call centers of over 800 agents and around 2000 voice recording channels
• Be a team member of the “Change the Bank” and Service excellence teams
• Manage annual budget of over 12 millions US dollars
• The role to be extended to cover other countries in Asia Pac including Hong Kong,
China, Macau, Taiwan, Vietnam, Malaysia and Indonesia in a 5-year roadmap
• Define 5-year roadmap to take over operation support from IBM after buy-back of
outsourcing contract, and to form a regional support organization
• Focus on continual improvement of process, people and technology with new
initiatives
• Review current operation practice and formulate best industry practice to support the
bank business that never sleeps
• Improve and enhance operation model to guarantee zero problem due to changes
• Oversee Voice Infrastructure of the bank with Avaya IP PABX, Cisco IP PABX, NICE
recording and so on.
• Ensure all technology setup in compliance with corporate security policy, internal audit
and regulatory requirements from Monetary Authority of Singapore
• Provide operations support for all Voice products in the bank
• Provides operational consultancy and advisory services to the business, systems
development and technology production services for system integration, product evaluation,
projects, new business engagements (i.e. acquisitions, integrations, new premises, major
projects etc)
• Develop influential and trustworthy working relationships with other technology and
Last Updated on 04/11/16 3/10
business peers to communicate and achieve performance objectives. This is aimed at
reduced decision-making and implementation times and focused on intelligent re-
engineering
• Add value to the organization & other technology streams by timely and proper
engagement and recommending best-fit solutions that meet the bank’s operational support
objectives. e.g. recommends tuning of systems, reduction in latency supporting high
performance communications and cost effectiveness
• Develop, manage and drive strategic relationships with IT Network/Voice vendors and
partners for the benefit of the bank and business where required
• Take ownership of work until resolution or delivery specifically on Severity incidents
• Be responsible for root cause analysis(RCA) process and creation of all technical
incident reports for the bank’s Network/Voice platforms
• Facilitate co-authored and published Network/Voice operational documentation
• Be responsible for maintaining, managing and executing the master services
agreements
• Be the primary contact in Operations for any Severity 1 operational issue for
Network/Voice systems
• Governance of FULL project development cycle and development of best-fit
technology solution to the Bank
• Transition ALL projects to BAU operations team
• Manage and govern financial budgets and spending
Key accomplishments:
• Office relocation from ComTech to Toh Guan including back office and contact center
with more than 200 agents
• Successfully upgraded voice recording system NICE3.2 with over 4700 recording
channels to 4.1
• Proposed new ISDN trunk design to improve diversity and resilience and to enhance
Disaster Recovery and BCP for DBS Asia Hub site with more than 2500 users
• Proposed new Business Continuity Plan for Voice to improve user transparency and
eliminate costly technical operation support, for Marina Bay Headquarter with 4500 users
and for DBS Asia Hub with 2500 users.
• Developed a PABX failover test plan to avoid service disruption on 24x7 contact
center operation
• Resolved long outstanding root cause of IMAX6.5 SL2 production problem
• Revised and imposed operation guidelines and rules such as DDI number assignment
• Reviewed pricing of vendor professional services resulted in 68% cut
• Enhanced SLA with a reduction of 1 hour in Mean Time to Problem Solving by revising
operation support model
BroadTel International Limited, Hong Kong & China
Head of Technology Development / Partner Jun 2001 – Jan 2013
• Set up of the new business venture from scratch
• Leading technology team for product development(software and hardware) based on
embedded Linux kernel and Microsoft Windows
• Steering technological direction for the business
• Formulating technological and business strategies for corporate development
• Developing Sales and marketing plan
• Identifying, studying and evaluating innovative technology
• Developing, transforming and consolidating the state of the art technologies into
business solutions/products to meet business needs
Last Updated on 04/11/16 4/10
• Managing and monitoring product development cycle
• Establish business relationship and cut deals with various suppliers in supply chain in
China
• Client need analysis
• Improvement of operational and production efficiency and cost control
• Problem management
• Governance of quality of service
• Corporate web site setup, development, management and update
• Office administration and management, cost control
Key accomplishments:
• Developed a USB phone adapter with built-in flash drive and RJ11 port for phone
connection, supporting Windows AutoRun for autoloading of 3rd
party software.
• Developed a SIP soft phone for Microsoft Windows to work seamlessly with the USB
phone adapter.
• Developed a 8-port PCI card with FXS and FXO daughter board for an Open Source
IP PBX running on a Linux PC computer
• Developing an embedded Linux kernel based VOIP telephone adapter supporting
H.323, SIP and IAX2
• Developing an embedded Linux kernel based handheld IP PBX with 4-port FXS/FXO,
4-port ISDN and 1-port T1/E1 for home users and small businesses.
• Leading development of a VoIP system for provisioning of carrier-graded voice, SMS
and video services over broadband Internet connections for residential and small/medium
business customers. This is a single platform that supports H.323, SIP and MGCP protocols,
and integrates with email/web system and PSTN/GSM mobile network. It includes:
 A Linux-based VoIP softswitch
 SIP proxies for connections from analog phone adapters, softphones and IP phones
 PSTN/SS7 gateways for connection to PSTN network
 SMS gateways for exchange of SMS messages with GSM mobile networks
 A voicemail system
 A audio conference server
 A proprietary proxy to support NAT traversal over NAT devices
 A Radius server for authentication, Authorization and Accounting
 A Linux-based billing system with Web interface and MySQL database.
Citigroup, Hong Kong
Vice President Aug 1998 – May 2001
• Assume full responsibilities for Data Center, Voice, Network and Network Security
infrastructures in Asia Pacific region including Hong Kong, Singapore, Taiwan, China,
Korea, Malaysia, Indonesia, Thailand and India.
• Manage network team for technology engineering design, project implementation and
operation support in Asia Pacific
• Manage ALL Network, Voice and Network Security systems including regional data
networks, firewalls, PABX systems and IPC Dealerboard trading systems, voice recorders
and voicemail system in Asia Pacific together with Disaster Recovery and Business
Continuity planning
• Manage annual budget of over 80 millions US dollars
• Budget preparation and financial tracking of projects and BAU spending
• Development of Firewall standard and security management with reference to corporate
security policy, internal audit and regulatory requirements
Last Updated on 04/11/16 5/10
• Monitor, review and streamline work process and procedures for management of change,
capacity, performance and security.
• Take ownership of technology architecture design/review
• Review and approve project design and development
• Share other technology streams with the best practice in using network resources
• Explore and develop strategic directions for future business technologies
• Represent Asia Pacific in development and formulation of new global standards and
strategies of Citigroup
• Apply and enforce adoption of global corporate technology standards in Asia Pacific
• Focus on continued improvement of process, people and technology with new initiatives
• Interface business units for new business requirements and define deliverables for team
players
• Management reporting of daily and project updates to senior management and business
units
• Dot-line reporting to New York Headquarter management
Key accomplishments:
• Designed and implemented 2-tier network security infrastructure with Cisco PIX and
Checkpoint firewalls for Internet access and 3-rd party extranets such as Reuters and
Bloomberg, leading to development of network security framework and management
• Developed secure network infrastructure for support of AMS/3 being deployed by
Stock Exchange of Hong Kong.
• Revised the regional firewall deployment strategy and associated security policy in
Asia Pacific including Australia.
• Revised a regional remote access solution and essential security policy for bandwidth-
demanding home users, telecommuters and clients/customers.
• Restructured and built a global corporate backbone and data centers for the group.
• Integrated Shroders’s regional network and PABX after recent acquisition of its
investment banking arm
• Office expansion and restacking in Hong Kong.
• Build-out of a new office in Bombay, India.
• Office relocation to a new building in Seoul, including build-out of a new data center
and trading floors of 100 seats together with a Checkpoint Firewall infrastructure for
connection from KOSPI exchange
• Office build-out in Taipei
• Planning and budgeting for office restructuring and expansion in Taipei.
• Developed an unified trading floor for co-locating trading arms from Salmon Smith
Barney and Citibank. The new trade floor eliminated all legacy delivery mechanisms for
market data services, live video broadcasting like CNN, and so on. The new design aims at
provisioning of a manageable, scaleable, fault tolerant platform that will be more flexible to
support rapid changing business environment. Scope of work included:
 Chair the Core Technology Infrastructure Group’s weekly meeting
 Liaison with Business Unit Managers
 Keep Track of budget spending
 Lead in development of the evolving Core Technology Infrastructure Group for
Citigroup in Asia
 Define deliverables for each and every team within the group
 Coordinate amongst different teams for project implementation
 Keep track of project progress in line with project schedule
 Interface with NY headquarter and Citibank Singapore for development and
implementation of regional technology solution
 Keep the developing regional design/architecture in line with the new global standards and
Last Updated on 04/11/16 6/10
solutions
• Worked together with global team including Tokyo and New York to define the new
global standards on LAN, WAN, Voice, Firewall and Dealing systems for the newly formed
financial conglomerate – Citigroup
• Designed and implemented a fault tolerant domestic ATM-based network
interconnecting 3 major buildings in Hong Kong for Salomon Smith Barney and Citibank.
Both companies leverage the network for delivery of mission critical services, remote backup
of business data and support of business continuity while disaster occurred in any of the
buildings.
• Developed and proposed a new strategic solution that can support an integrated
delivery of voice, data and video over the existing WAN backbone infrastructure for
bandwidth efficiency and cost savings.
• Co-located Salomon Smith Barney office in Seoul, Jakarta and Beijing into Citibank
premises
 Acquired and developed business requirements
 Evaluated the existing technology infrastructure of Citibank for compliance of SSB
technology standards
 Liaise between local technical support team of Citibank and local vendors for delivery
of technology solutions which is compliant to global standards
 Prepared budget for the co-location
 Managed the implementation of the concluded design and solution
• Sourcing and evaluating suitable Call Accounting Systems for a regional deployment
in Asia
• Evaluated the existing technology infrastructure of Citibank for compliance of SSB
technology standards
• Liaised between local technical support team of Citibank and local vendors for delivery
of technology solutions which are compliant to global standards
Citigroup/Salomon Brothers (US investment bank), Hong Kong
Assistant Vice President April 1996 – Jul 1998
• Acted as the team leader of AP Communications department
• Performed the role of a Network Architect for design, engineering, implementation and
support of data centers and the regional corporate infrastructure (LAN + WAN + Voice +
Video + Firewall) spreading over Asia Pacific area including Hong Kong, mainland China,
Singapore, Korea, Thailand, Taiwan, Australia, Malaysia and Indonesia;
Scope of work covered the following:
 Firewall standard development and security management
 Managing and integrating junior staff to the team
 budget preparation and tracking for projects
 project management and monitoring
 Monitoring & analysing network and PABX capacity & performance;
 Isolating & troubleshooting network problems;
 Reviewing and setting up network security policy;
 Capacity planning for network and PABX growth;
 Voice Support including move, add and change of phones and dealerboard and
troubleshooting
 Getting involved in budgeting cycle;
 Liaising with vendors for price negotiation & project deployment;
 Designing wiring closet and structured cabling system
 BAU – Day to Day support activities such as trading floor/dealing room support,
and addition & relocation of phones for users.
Key accomplishments:
Last Updated on 04/11/16 7/10
• Deployed the first corporate firewall solution/infrastructure for retrieving historical
financial market data of Reuters Session Services and Internet Access with local web server
• Designed and developed firewall network infrastructure for security protection against
external network access from joint ventures’ networks in Korea.
• Deployed Open Bloomberg system in Hong Kong through the existing Cisco PIX
firewall infrastructure and also its delivery to Kuala Lumpur office through intranet.
• Led the development of in-house security system that incorporates state of the art
technology in authentication, authorization and accounting of remote dial-in access by the
use of Ascend MAX4000s and SecureDynamics ACE Server and one-time token password
(SecureID card).
• Designed and proposed for LAN re-engineering with Cisco Catalyst 5500 series
Ethernet Switches in Hong Kong for performance enhancement, ease of management and
additional support of multimedia delivery.
• Migrated analog voice recorder to MERCOM digital voice recorder
• Expanded IPC dealerboard system for accommodation of additional 100 trading desks
• Expanded Lucent PBX
• Developed the regional strategy and network infrastructure for ISDN backup to
international leased circuits connecting to different satellite offices.
• Initiated the restructuring of the existing global DNS system and taking a regional lead
role in its implementation.
• Managed the consolidation and the relocation of disparate networks in 2 branch
offices at 2 Pacific Place in Hong Kong for cost savings:
• Developed a network management system for monitoring of network capacity and
alerting of system failure by customising and integrating a set of public domain network
management software (MRTG) from the Internet.
• Established an inter-office ISDN connection between 2 branch offices in Sydney, Australia.
• Planned for Triarch roll-out in Singapore office for delivery of real time market data,
and deployment of Reuters Session Services for delivery of historical market data.
• Designed for roll-out of remote access services for home users in Singapore and
guided remote technical staff on the project development and deployment including training
on equipment configuration.
• Developed a feasible solution for remote access to the Salomon Network from Hong
Kong Futures Exchange. The whole system has been built with a remote notebook
computer running Windows NT 4.0 connecting to a Cisco router at central site over ISDN.
By using Multilink PPP 2 ISDN B channels are aggregated into a bundle of 128Kbps so as
to provide throughput for bandwidth-intensive X Windows application.
• Migrated from old-fashioned standalone Reuters RT terminals to its networked version
running on Windows NT machines.
• Led the implementation of a network infrastructure for Reuters Select Feed + (RSF+)
services for accessing to real time financial market data.
• Investigated a solution for graceful co-existence of Reuters Select Feed and Reuters
Select Feed Plus financial market data services by distributing UDP broadcasting packets to
different segments.
• Implemented a network management and monitoring system with HP OpenVew and
HP Netmetrix in Hong Kong office.
Macroview Telecom, Hong Kong
Software Engineer/Project Consultant August 1993 - March 1996
• Application software development for banks
• Pre- and Post-“ Sales technical activities, Preparation of tender proposal, Network design,
Products demonstration and presentation
Last Updated on 04/11/16 8/10
• network installation and implementation, product evaluation and testing and in-house
Novell LAN and ORACLE database administration
Key Accomplishments:
• COPUT for Standard Chartered Bank
Sole embedded application developer for automatically updating customers’ bank
passbooks by COPUT over a SNA/LU0 session via SDLC multi-drop lines.
.
• COPUT for Thai Farmers’ Bank
Sole embedded application developer for automatically updating customers’ bank
passbooks by COPUT over a SNA/LU0 session via SDLC multi-drop lines.
• COPUT for Bank of East Asia
Sole embedded application developer for automatically updating customers’ passbooks by
COPUT with 3270 terminal emulation on IBM LANDP over Token Ring network.
• Directed the development of in-house inventory control system on ORACLE database
• Designed and implemented a network system for an Internet service provider (ISP),
which is trying to provide Internet access services to the public in mainland China;
• installed and maintained Novell Netware file servers, SUN SPARC servers, ORACLE7
server, and E-mail system for internal and external communication through the Internet
• Worked with a project team from ORACLE to implement a benchmark set-up for
demonstrating how mission critical client/server computing can effectively offload processing
from IBM mainframe using Netwise’s state of the art middleware, Remote Procedure Call.
This was to compete with Sybase & Informix teams for the tender from Hong Kong
Immigration Department.
• Proposed a router based IP network to interconnect around 300 remote branch offices
of Ping An Insurance Company, spreading over the country by using Cisco routers over
public X.25 services, dial-up lines and private leased circuits; Offered a series of tailor-made
training programs to a class of over 50 trainees from the company.
TRAINING PROGRAM ATTENDED:
Cisco Systems
- Cisco SNA configuration for multi-protocol administrators
- IPv6 Fundamentals, Design and Deployment
Checkpoint
- Advanced Firewall-1 4.0 Management (CCSE)
- Advanced Firewall-1 4.0 Management (CCSA)
Microsoft
- Implementing and Administering Microsoft 2000 Directory Services (MS2154)
- Designing Microsoft Windows 2000 Directory Services Infrastructure (MS1561)
- Implementing Microsoft 2000 Network Infrastructure (MS2153)
- Implementing Microsoft 2000 Professional and server (MS2152)
- Programming Microsoft SQL server 2000 Database (MS2073)
- Administering Microsoft SQL Server 2000 Database (MS2072)
NICE – voice recording
- NICE Interaction Management 4.1 – NICE Certified System Administrator
Standard
Algorithmic Research, Israel
- CryptoKit Product Training (Encryption Software and Tools)
Last Updated on 04/11/16 9/10
Learning Tree International
- Project Management Skills for Success: Hands-on
Netwise, Inc (US middleware vendor)
- Using Netwise RPC Tool with Windows
- Using Customization with Netwise RPC Tool
- Network Computing using Netwise RPC Tool
- Using Netwise System for Mainframes: MVS/IMS & MVS/CICS
The Hong Kong Polytechnic University
- Video Games Development (Game Programming)
PRODUCT KNOWLEDGE:
Network: Cisco, Juniper, F5, Huawei
Security: Checkpoint, Fortinet, Juniper, Cisco, Bluecoat, Pala Alto, Huawei
Voice: Avaya/Lucent, Asterisk, IPC, NICE, VoIP
Server: Sun Microsystem, Intel X86
Application Server: Oracle, MySQL, SQL server, Active Directory, Apache Tomcat
Market Data: Reuters, Bloomberg
OS: Microsoft Windows, Unix, Linux, Embedded Linux, IBM OS/2
Middleware: Remote Procedure Call, RMI
Programming Language: C, C++, Pascal, Java, HTML
Cloud: Openstack
Last Updated on 04/11/16 10/10

More Related Content

What's hot

L10 pm for global banking projects
L10 pm for global banking projectsL10 pm for global banking projects
L10 pm for global banking projectsAsa Chan
 
Abdulla Amin AlMudharreb
Abdulla Amin AlMudharrebAbdulla Amin AlMudharreb
Abdulla Amin AlMudharrebAbdulla Amin
 
Rothke effective data destruction practices
Rothke   effective data destruction practicesRothke   effective data destruction practices
Rothke effective data destruction practicesBen Rothke
 
How to Protect Your Mainframe from Hackers (v1.0)
How to Protect Your Mainframe from Hackers (v1.0)How to Protect Your Mainframe from Hackers (v1.0)
How to Protect Your Mainframe from Hackers (v1.0)Rui Miguel Feio
 
Skeletons in the Closet: Securing Inherited Applications
Skeletons in the Closet: Securing Inherited ApplicationsSkeletons in the Closet: Securing Inherited Applications
Skeletons in the Closet: Securing Inherited ApplicationsDenim Group
 
The Permanent Campaign
The Permanent CampaignThe Permanent Campaign
The Permanent CampaignDenim Group
 
Security Audit on the Mainframe (v1.0 - 2016)
Security Audit on the Mainframe (v1.0 - 2016)Security Audit on the Mainframe (v1.0 - 2016)
Security Audit on the Mainframe (v1.0 - 2016)Rui Miguel Feio
 
Cyber security and the mainframe (v1.3)
Cyber security and the mainframe (v1.3)Cyber security and the mainframe (v1.3)
Cyber security and the mainframe (v1.3)Rui Miguel Feio
 
2017 - A New Look at Mainframe Hacking and Penetration Testing v2.2
2017 - A New Look at Mainframe Hacking and Penetration Testing v2.22017 - A New Look at Mainframe Hacking and Penetration Testing v2.2
2017 - A New Look at Mainframe Hacking and Penetration Testing v2.2Rui Miguel Feio
 
IT Security Management -- People, Procedures and Tools
IT Security Management -- People, Procedures and ToolsIT Security Management -- People, Procedures and Tools
IT Security Management -- People, Procedures and ToolsAndrew S. Baker (ASB)
 
NZISF Talk: Six essential security services
NZISF Talk: Six essential security servicesNZISF Talk: Six essential security services
NZISF Talk: Six essential security servicesHinne Hettema
 
Bn 1023 demo network security
Bn 1023 demo  network securityBn 1023 demo  network security
Bn 1023 demo network securityconline training
 
Cv bevan lane january 2014 oil and gas
Cv bevan lane january 2014 oil and gasCv bevan lane january 2014 oil and gas
Cv bevan lane january 2014 oil and gasBevan Lane
 
Mainframe Security - It's not just about your ESM v2.2
Mainframe Security - It's not just about your ESM v2.2Mainframe Security - It's not just about your ESM v2.2
Mainframe Security - It's not just about your ESM v2.2Rui Miguel Feio
 
Share 2015 - 5 Myths that can put your Mainframe at risk (v1.3)
Share 2015 - 5 Myths that can put your Mainframe at risk (v1.3)Share 2015 - 5 Myths that can put your Mainframe at risk (v1.3)
Share 2015 - 5 Myths that can put your Mainframe at risk (v1.3)Rui Miguel Feio
 

What's hot (20)

L10 pm for global banking projects
L10 pm for global banking projectsL10 pm for global banking projects
L10 pm for global banking projects
 
Abdulla Amin AlMudharreb
Abdulla Amin AlMudharrebAbdulla Amin AlMudharreb
Abdulla Amin AlMudharreb
 
Rothke effective data destruction practices
Rothke   effective data destruction practicesRothke   effective data destruction practices
Rothke effective data destruction practices
 
Secure Iowa Oct 2016
Secure Iowa Oct 2016Secure Iowa Oct 2016
Secure Iowa Oct 2016
 
How to Protect Your Mainframe from Hackers (v1.0)
How to Protect Your Mainframe from Hackers (v1.0)How to Protect Your Mainframe from Hackers (v1.0)
How to Protect Your Mainframe from Hackers (v1.0)
 
Skeletons in the Closet: Securing Inherited Applications
Skeletons in the Closet: Securing Inherited ApplicationsSkeletons in the Closet: Securing Inherited Applications
Skeletons in the Closet: Securing Inherited Applications
 
The Permanent Campaign
The Permanent CampaignThe Permanent Campaign
The Permanent Campaign
 
Security Audit on the Mainframe (v1.0 - 2016)
Security Audit on the Mainframe (v1.0 - 2016)Security Audit on the Mainframe (v1.0 - 2016)
Security Audit on the Mainframe (v1.0 - 2016)
 
Cyber security and the mainframe (v1.3)
Cyber security and the mainframe (v1.3)Cyber security and the mainframe (v1.3)
Cyber security and the mainframe (v1.3)
 
Resume of Joseph Curcurato
Resume of Joseph CurcuratoResume of Joseph Curcurato
Resume of Joseph Curcurato
 
2017 - A New Look at Mainframe Hacking and Penetration Testing v2.2
2017 - A New Look at Mainframe Hacking and Penetration Testing v2.22017 - A New Look at Mainframe Hacking and Penetration Testing v2.2
2017 - A New Look at Mainframe Hacking and Penetration Testing v2.2
 
IT Security Management -- People, Procedures and Tools
IT Security Management -- People, Procedures and ToolsIT Security Management -- People, Procedures and Tools
IT Security Management -- People, Procedures and Tools
 
02 學校網絡安全漏洞的評估分享, 管理挑戰及趨勢。
02 學校網絡安全漏洞的評估分享, 管理挑戰及趨勢。02 學校網絡安全漏洞的評估分享, 管理挑戰及趨勢。
02 學校網絡安全漏洞的評估分享, 管理挑戰及趨勢。
 
NZISF Talk: Six essential security services
NZISF Talk: Six essential security servicesNZISF Talk: Six essential security services
NZISF Talk: Six essential security services
 
Bn 1023 demo network security
Bn 1023 demo  network securityBn 1023 demo  network security
Bn 1023 demo network security
 
Software-Brochure-2
Software-Brochure-2Software-Brochure-2
Software-Brochure-2
 
Security challenges in 2017
Security challenges in 2017Security challenges in 2017
Security challenges in 2017
 
Cv bevan lane january 2014 oil and gas
Cv bevan lane january 2014 oil and gasCv bevan lane january 2014 oil and gas
Cv bevan lane january 2014 oil and gas
 
Mainframe Security - It's not just about your ESM v2.2
Mainframe Security - It's not just about your ESM v2.2Mainframe Security - It's not just about your ESM v2.2
Mainframe Security - It's not just about your ESM v2.2
 
Share 2015 - 5 Myths that can put your Mainframe at risk (v1.3)
Share 2015 - 5 Myths that can put your Mainframe at risk (v1.3)Share 2015 - 5 Myths that can put your Mainframe at risk (v1.3)
Share 2015 - 5 Myths that can put your Mainframe at risk (v1.3)
 

Viewers also liked

MarkHauserRecommendationLetter
MarkHauserRecommendationLetterMarkHauserRecommendationLetter
MarkHauserRecommendationLetterMark Hauser
 
Updated Resume Nov 2015
Updated Resume Nov 2015Updated Resume Nov 2015
Updated Resume Nov 2015Allison DeVore
 
Events Addendum v3.1
Events Addendum v3.1Events Addendum v3.1
Events Addendum v3.1Samuel Beech
 
Insurance Course Outline (Fetac Level 5)
Insurance Course Outline (Fetac Level 5)Insurance Course Outline (Fetac Level 5)
Insurance Course Outline (Fetac Level 5)Mark Griffin
 
Mapa conceptual técnica oral
Mapa conceptual técnica oralMapa conceptual técnica oral
Mapa conceptual técnica oralAndrea Mesa
 
Guia clasificación de elementos por similitud
Guia clasificación de elementos por similitudGuia clasificación de elementos por similitud
Guia clasificación de elementos por similitudAndrea Mesa
 
IIBB - Inconsistencia de la territorialidad para ser agente de recaudación.
IIBB - Inconsistencia de la territorialidad para ser agente de recaudación.IIBB - Inconsistencia de la territorialidad para ser agente de recaudación.
IIBB - Inconsistencia de la territorialidad para ser agente de recaudación.Alejandro Germán Rodriguez
 
Pengaruh Pendidikan dan Pelatihan Terhadap Kinerja
Pengaruh Pendidikan dan Pelatihan Terhadap KinerjaPengaruh Pendidikan dan Pelatihan Terhadap Kinerja
Pengaruh Pendidikan dan Pelatihan Terhadap KinerjaEko Mardianto
 

Viewers also liked (12)

Resume 2016
Resume 2016Resume 2016
Resume 2016
 
Intermezzo 1jhljghfffjfjjfffjjfffjfjfjjfff
Intermezzo 1jhljghfffjfjjfffjjfffjfjfjjfffIntermezzo 1jhljghfffjfjjfffjjfffjfjfjjfff
Intermezzo 1jhljghfffjfjjfffjjfffjfjfjjfff
 
MarkHauserRecommendationLetter
MarkHauserRecommendationLetterMarkHauserRecommendationLetter
MarkHauserRecommendationLetter
 
Updated Resume Nov 2015
Updated Resume Nov 2015Updated Resume Nov 2015
Updated Resume Nov 2015
 
Events Addendum v3.1
Events Addendum v3.1Events Addendum v3.1
Events Addendum v3.1
 
Insurance Course Outline (Fetac Level 5)
Insurance Course Outline (Fetac Level 5)Insurance Course Outline (Fetac Level 5)
Insurance Course Outline (Fetac Level 5)
 
Mapa conceptual técnica oral
Mapa conceptual técnica oralMapa conceptual técnica oral
Mapa conceptual técnica oral
 
Guia clasificación de elementos por similitud
Guia clasificación de elementos por similitudGuia clasificación de elementos por similitud
Guia clasificación de elementos por similitud
 
IIBB - Inconsistencia de la territorialidad para ser agente de recaudación.
IIBB - Inconsistencia de la territorialidad para ser agente de recaudación.IIBB - Inconsistencia de la territorialidad para ser agente de recaudación.
IIBB - Inconsistencia de la territorialidad para ser agente de recaudación.
 
Pengaruh Pendidikan dan Pelatihan Terhadap Kinerja
Pengaruh Pendidikan dan Pelatihan Terhadap KinerjaPengaruh Pendidikan dan Pelatihan Terhadap Kinerja
Pengaruh Pendidikan dan Pelatihan Terhadap Kinerja
 
Keputusan 5
Keputusan  5Keputusan  5
Keputusan 5
 
Η ενδυμασία στο σχολείο
Η ενδυμασία στο σχολείοΗ ενδυμασία στο σχολείο
Η ενδυμασία στο σχολείο
 

Similar to VincentChan2016Apr11

Similar to VincentChan2016Apr11 (20)

Andrew Chalmers CV
Andrew Chalmers CVAndrew Chalmers CV
Andrew Chalmers CV
 
John_Rehmert
John_RehmertJohn_Rehmert
John_Rehmert
 
Resume - Mohamed Aman Mohamed Elhelw-Jun 2016
Resume - Mohamed Aman Mohamed Elhelw-Jun 2016Resume - Mohamed Aman Mohamed Elhelw-Jun 2016
Resume - Mohamed Aman Mohamed Elhelw-Jun 2016
 
John_Rehmert
John_RehmertJohn_Rehmert
John_Rehmert
 
Template 30
Template 30Template 30
Template 30
 
Jorge Torres -IT Director
Jorge Torres -IT DirectorJorge Torres -IT Director
Jorge Torres -IT Director
 
John Hornsby CV (1)
John Hornsby CV (1)John Hornsby CV (1)
John Hornsby CV (1)
 
Resume
ResumeResume
Resume
 
TIANQIANG_Carl_Network_Security
TIANQIANG_Carl_Network_SecurityTIANQIANG_Carl_Network_Security
TIANQIANG_Carl_Network_Security
 
Muneer Balqadi
Muneer BalqadiMuneer Balqadi
Muneer Balqadi
 
EH CV Dec 15
EH CV Dec 15EH CV Dec 15
EH CV Dec 15
 
Gicel Ragasa - 2015CV
Gicel Ragasa - 2015CV Gicel Ragasa - 2015CV
Gicel Ragasa - 2015CV
 
Ibrahim alamri cv 20
Ibrahim alamri cv 20Ibrahim alamri cv 20
Ibrahim alamri cv 20
 
Ibrahim alamri cv
Ibrahim alamri cvIbrahim alamri cv
Ibrahim alamri cv
 
Ibrahim alamri cv 20199 new
Ibrahim alamri cv 20199 newIbrahim alamri cv 20199 new
Ibrahim alamri cv 20199 new
 
Resume Biju Alex
Resume Biju AlexResume Biju Alex
Resume Biju Alex
 
KTetreault IT
KTetreault ITKTetreault IT
KTetreault IT
 
youssef_amr_madkour
youssef_amr_madkour youssef_amr_madkour
youssef_amr_madkour
 
Sorabh Mangalx
Sorabh MangalxSorabh Mangalx
Sorabh Mangalx
 
Newest CV
Newest CVNewest CV
Newest CV
 

VincentChan2016Apr11

  • 1. Curriculum Vitae PERSONAL INFORMATION: Name: CHAN Chiu Ming (Vincent) Gender: Male Nationality: Hong Kong Citizen / Singapore Permanent Resident Email: receive4me@gmail.com (preferred contact) Mobile Phone: +65-86708893 (Singapore) +852-68569181 (Hong Kong) Home phone: +852-23421986 (Hong Kong) Languages: English, Mandarin Chinese (Putonghua) and Cantonese EDUCATION: • Bachelor of Engineering (Hons) in Computer Systems Engineering – University of Warwick, UK (July 1993) • Master of Business Administration in Finance and Investment – University of Hull, UK (1998) PROFESSIONAL AFFILIATIONS: • Passed Chartered Financial Analyst (CFA) Level I exam in 2002 • Passed written exam of Cisco Certified Internetworking Expert (CCIE) for routing and switching • Passed ITIL Foundation (2011) • Microsoft Certified Product Specialist for Windows (MCP ID: 260780) • Netwise Certified Professional Software Developer for Middleware – Remote Procedure Call (RPC) Research and Development: • Cyber/Internet/Digital bank without branches – Cyber/Internet/Digital banking, aka, a FinTech company with bank license and banking services • State of the art Cyber banking system WITHOUT IBM mainframe, Oracle database and EMC storage, lower IT cost per customer bank account to 1 to 2 USD • New breed banking system architecture– a distributed approach with massive scalability, fast deployment and no data center relocation • Mobile App Architecture • Next generation datacentre design PROFILE SUMMARY: • Entrepreneur and innovation mind-set and founded/ran a start-up Technology company for 10 years • Excellent financial and cost analysis/control, and annual/project budget management, with MBA degree and passed CFA Level 1 exam in 2002 • All-round IT technology profile including Data Center, Network, Voice, Cyber security, Middleware, Microsoft Windows, Linux and banking application software development • Sound working knowledge of Cyber security governance/management framework(Total Visibility and Complete Control together with life cycle :assessment, gap analysis, remediation planning, implementation roadmap and execution), corporate security policy, security compliance (IT Security Audit), security technologies (Firewall, WAF, IDS/IPS, WAF, Sandbox, Proxy, anti-DDOS, anti-virus), security operations: system hardening, log review, security incident detection/management, mitigation/remediation, Last Updated on 04/11/16 1/10
  • 2. reporting and vulnerability/threat management (Vulnerability scanning, Penetration testing) • Proven leader armed with over 20 years of global experience in establishing and managing Network, Voice and Firewall Security Infrastructure policies/standards/operations in key global markets, namely China, Hong Kong, Macau, Japan, Korea, Taiwan, Malaysia, Singapore, Vietnam, Thailand, Indonesia, UAE, New Zealand, Australia, Luxembourg, Netherland, Switzerland, Italy, Spain, Russia, Germany, UK, South Africa, Canada, USA, Chile and Brazil – Have led up to 35 staff globally • Working experience in highly demanded US investment bank and US bank with diversified cultures, languages and races • Well exposure to a dynamic working environment with continued corporate mergers and acquisitions that evolved corporate technology standards/management practice/roadmap for regional IT consolidation and integration to support business growth • Tremendous project management experience with full project cycle starting from business requirements, solution, costing, budgeting, planning, deployment, user acceptance test, documentation and operation handover. • Know-how in 3 types of audit and regulatory requirements from US, Singapore and Hong Kong including risk management/control, data management/protection, security, business continuity and so on. WORK EXPERIENCE: China Construction Bank, Hong Kong Head of Network (Network / Voice / Cyber Security) June 2015 - Present • In charge of network engineers supporting the International/Global network infrastructure outside China, covering Hong Kong, Macau, Japan, Korea, Taiwan, Malaysia, Singapore, Vietnam, UAE, New Zealand, Australia, Luxembourg, Netherland, Switzerland, Italy, Spain, Russia, Germany, UK, South Africa, Canada, USA, Chile and Brazil, in addition to 2 data centers in Hong Kong as international hub • In charge of voice engineers supporting the international Cisco voice infrastructure • In charge of security engineers supporting Cyber security infrastructure including multiple brands of firewalls, IDS/IPS, Sandbox, Proxy, anti-DDOS, anti-virus and so on • Manage annual budget of over 50 millions US dollars • Responsible for Cyber security governance/management framework(Total Visibility and Complete Control together with life cycle: assessment, gap analysis, remediation planning, implementation roadmap and execution), corporate security policy, security compliance (IT Security Audit), security technologies (Firewall, WAF, IDS/IPS, WAF, Sandbox, Proxy, anti-DDOS, anti-virus), security operations: system hardening, log review, security incident detection/management, mitigation/remediation, reporting and vulnerability/threat management (Vulnerability scanning, Penetration testing) • Govern security matters and safeguard network from intrusions, unauthorized access, attacks, loopholes, phishing, threats, APT, viruses and malwares through Internet and/or third party connections such as Bloomberg and Reuters • Enforce best management and technology practices by focusing on improvement of people, process and technology and by leveraging from previous international working experiences • Ensure all technology setup in compliance with corporate security policy, internal audit and regulatory requirements from Hong Kong Monetary Authority • Assume Full responsibilities of the International network, voice and firewall security infrastructures including new initiatives, engineering design, project implementation and 24x7 operations support including, least but not last, incident/problem management, change control/management, security management, circuit management, Last Updated on 04/11/16 2/10
  • 3. capacity/availability/performance/resilience management, disaster recovery/contingency planning, design and configuration management, patch management, network management/monitoring, asset management, vendor management, cost/budget management and staff skill enhancement. • Making sure that the network performance and reliability meet banking application requirements including AML, OCBS, ODAS, HKICL, FTS, Risk Manager and so on. • Responsible for office build-out of new overseas branches around the world Key accomplishments: - Proposed a new breed cyber banking system/services with a distributed architecture but WITHOUT branches, IBM mainframe, Oracle database and EMC storage, for low IT cost, massive scalability, fast deployment and no data center relocation - Proposed a new solution to completely revamp the existing security infrastructure in reacting to the latest development of cyber threats such as APT - Successfully detected and protected the business from external attacks in South Africa and Singapore - Revised operations support framework by enforcing best management and technology practices Development Bank of Singapore (DBS), Singapore Vice President Feb 2013 – May 2015 • In charge of the whole Operations support of both Network and Voice technology infrastructure in Singapore • Lead L3 technology support team to review and approve design and change, and to troubleshoot production problems • Lead L1 technology support team to provide first line support to production problem and day to day operation support including circuit outages,auditing and maintenance review • In charge of Voice Integration team for development of projects and new initiatives • In charge of Voice Operation team for BAU operation support of a phone user base of over 15,000, 2 call centers of over 800 agents and around 2000 voice recording channels • Be a team member of the “Change the Bank” and Service excellence teams • Manage annual budget of over 12 millions US dollars • The role to be extended to cover other countries in Asia Pac including Hong Kong, China, Macau, Taiwan, Vietnam, Malaysia and Indonesia in a 5-year roadmap • Define 5-year roadmap to take over operation support from IBM after buy-back of outsourcing contract, and to form a regional support organization • Focus on continual improvement of process, people and technology with new initiatives • Review current operation practice and formulate best industry practice to support the bank business that never sleeps • Improve and enhance operation model to guarantee zero problem due to changes • Oversee Voice Infrastructure of the bank with Avaya IP PABX, Cisco IP PABX, NICE recording and so on. • Ensure all technology setup in compliance with corporate security policy, internal audit and regulatory requirements from Monetary Authority of Singapore • Provide operations support for all Voice products in the bank • Provides operational consultancy and advisory services to the business, systems development and technology production services for system integration, product evaluation, projects, new business engagements (i.e. acquisitions, integrations, new premises, major projects etc) • Develop influential and trustworthy working relationships with other technology and Last Updated on 04/11/16 3/10
  • 4. business peers to communicate and achieve performance objectives. This is aimed at reduced decision-making and implementation times and focused on intelligent re- engineering • Add value to the organization & other technology streams by timely and proper engagement and recommending best-fit solutions that meet the bank’s operational support objectives. e.g. recommends tuning of systems, reduction in latency supporting high performance communications and cost effectiveness • Develop, manage and drive strategic relationships with IT Network/Voice vendors and partners for the benefit of the bank and business where required • Take ownership of work until resolution or delivery specifically on Severity incidents • Be responsible for root cause analysis(RCA) process and creation of all technical incident reports for the bank’s Network/Voice platforms • Facilitate co-authored and published Network/Voice operational documentation • Be responsible for maintaining, managing and executing the master services agreements • Be the primary contact in Operations for any Severity 1 operational issue for Network/Voice systems • Governance of FULL project development cycle and development of best-fit technology solution to the Bank • Transition ALL projects to BAU operations team • Manage and govern financial budgets and spending Key accomplishments: • Office relocation from ComTech to Toh Guan including back office and contact center with more than 200 agents • Successfully upgraded voice recording system NICE3.2 with over 4700 recording channels to 4.1 • Proposed new ISDN trunk design to improve diversity and resilience and to enhance Disaster Recovery and BCP for DBS Asia Hub site with more than 2500 users • Proposed new Business Continuity Plan for Voice to improve user transparency and eliminate costly technical operation support, for Marina Bay Headquarter with 4500 users and for DBS Asia Hub with 2500 users. • Developed a PABX failover test plan to avoid service disruption on 24x7 contact center operation • Resolved long outstanding root cause of IMAX6.5 SL2 production problem • Revised and imposed operation guidelines and rules such as DDI number assignment • Reviewed pricing of vendor professional services resulted in 68% cut • Enhanced SLA with a reduction of 1 hour in Mean Time to Problem Solving by revising operation support model BroadTel International Limited, Hong Kong & China Head of Technology Development / Partner Jun 2001 – Jan 2013 • Set up of the new business venture from scratch • Leading technology team for product development(software and hardware) based on embedded Linux kernel and Microsoft Windows • Steering technological direction for the business • Formulating technological and business strategies for corporate development • Developing Sales and marketing plan • Identifying, studying and evaluating innovative technology • Developing, transforming and consolidating the state of the art technologies into business solutions/products to meet business needs Last Updated on 04/11/16 4/10
  • 5. • Managing and monitoring product development cycle • Establish business relationship and cut deals with various suppliers in supply chain in China • Client need analysis • Improvement of operational and production efficiency and cost control • Problem management • Governance of quality of service • Corporate web site setup, development, management and update • Office administration and management, cost control Key accomplishments: • Developed a USB phone adapter with built-in flash drive and RJ11 port for phone connection, supporting Windows AutoRun for autoloading of 3rd party software. • Developed a SIP soft phone for Microsoft Windows to work seamlessly with the USB phone adapter. • Developed a 8-port PCI card with FXS and FXO daughter board for an Open Source IP PBX running on a Linux PC computer • Developing an embedded Linux kernel based VOIP telephone adapter supporting H.323, SIP and IAX2 • Developing an embedded Linux kernel based handheld IP PBX with 4-port FXS/FXO, 4-port ISDN and 1-port T1/E1 for home users and small businesses. • Leading development of a VoIP system for provisioning of carrier-graded voice, SMS and video services over broadband Internet connections for residential and small/medium business customers. This is a single platform that supports H.323, SIP and MGCP protocols, and integrates with email/web system and PSTN/GSM mobile network. It includes:  A Linux-based VoIP softswitch  SIP proxies for connections from analog phone adapters, softphones and IP phones  PSTN/SS7 gateways for connection to PSTN network  SMS gateways for exchange of SMS messages with GSM mobile networks  A voicemail system  A audio conference server  A proprietary proxy to support NAT traversal over NAT devices  A Radius server for authentication, Authorization and Accounting  A Linux-based billing system with Web interface and MySQL database. Citigroup, Hong Kong Vice President Aug 1998 – May 2001 • Assume full responsibilities for Data Center, Voice, Network and Network Security infrastructures in Asia Pacific region including Hong Kong, Singapore, Taiwan, China, Korea, Malaysia, Indonesia, Thailand and India. • Manage network team for technology engineering design, project implementation and operation support in Asia Pacific • Manage ALL Network, Voice and Network Security systems including regional data networks, firewalls, PABX systems and IPC Dealerboard trading systems, voice recorders and voicemail system in Asia Pacific together with Disaster Recovery and Business Continuity planning • Manage annual budget of over 80 millions US dollars • Budget preparation and financial tracking of projects and BAU spending • Development of Firewall standard and security management with reference to corporate security policy, internal audit and regulatory requirements Last Updated on 04/11/16 5/10
  • 6. • Monitor, review and streamline work process and procedures for management of change, capacity, performance and security. • Take ownership of technology architecture design/review • Review and approve project design and development • Share other technology streams with the best practice in using network resources • Explore and develop strategic directions for future business technologies • Represent Asia Pacific in development and formulation of new global standards and strategies of Citigroup • Apply and enforce adoption of global corporate technology standards in Asia Pacific • Focus on continued improvement of process, people and technology with new initiatives • Interface business units for new business requirements and define deliverables for team players • Management reporting of daily and project updates to senior management and business units • Dot-line reporting to New York Headquarter management Key accomplishments: • Designed and implemented 2-tier network security infrastructure with Cisco PIX and Checkpoint firewalls for Internet access and 3-rd party extranets such as Reuters and Bloomberg, leading to development of network security framework and management • Developed secure network infrastructure for support of AMS/3 being deployed by Stock Exchange of Hong Kong. • Revised the regional firewall deployment strategy and associated security policy in Asia Pacific including Australia. • Revised a regional remote access solution and essential security policy for bandwidth- demanding home users, telecommuters and clients/customers. • Restructured and built a global corporate backbone and data centers for the group. • Integrated Shroders’s regional network and PABX after recent acquisition of its investment banking arm • Office expansion and restacking in Hong Kong. • Build-out of a new office in Bombay, India. • Office relocation to a new building in Seoul, including build-out of a new data center and trading floors of 100 seats together with a Checkpoint Firewall infrastructure for connection from KOSPI exchange • Office build-out in Taipei • Planning and budgeting for office restructuring and expansion in Taipei. • Developed an unified trading floor for co-locating trading arms from Salmon Smith Barney and Citibank. The new trade floor eliminated all legacy delivery mechanisms for market data services, live video broadcasting like CNN, and so on. The new design aims at provisioning of a manageable, scaleable, fault tolerant platform that will be more flexible to support rapid changing business environment. Scope of work included:  Chair the Core Technology Infrastructure Group’s weekly meeting  Liaison with Business Unit Managers  Keep Track of budget spending  Lead in development of the evolving Core Technology Infrastructure Group for Citigroup in Asia  Define deliverables for each and every team within the group  Coordinate amongst different teams for project implementation  Keep track of project progress in line with project schedule  Interface with NY headquarter and Citibank Singapore for development and implementation of regional technology solution  Keep the developing regional design/architecture in line with the new global standards and Last Updated on 04/11/16 6/10
  • 7. solutions • Worked together with global team including Tokyo and New York to define the new global standards on LAN, WAN, Voice, Firewall and Dealing systems for the newly formed financial conglomerate – Citigroup • Designed and implemented a fault tolerant domestic ATM-based network interconnecting 3 major buildings in Hong Kong for Salomon Smith Barney and Citibank. Both companies leverage the network for delivery of mission critical services, remote backup of business data and support of business continuity while disaster occurred in any of the buildings. • Developed and proposed a new strategic solution that can support an integrated delivery of voice, data and video over the existing WAN backbone infrastructure for bandwidth efficiency and cost savings. • Co-located Salomon Smith Barney office in Seoul, Jakarta and Beijing into Citibank premises  Acquired and developed business requirements  Evaluated the existing technology infrastructure of Citibank for compliance of SSB technology standards  Liaise between local technical support team of Citibank and local vendors for delivery of technology solutions which is compliant to global standards  Prepared budget for the co-location  Managed the implementation of the concluded design and solution • Sourcing and evaluating suitable Call Accounting Systems for a regional deployment in Asia • Evaluated the existing technology infrastructure of Citibank for compliance of SSB technology standards • Liaised between local technical support team of Citibank and local vendors for delivery of technology solutions which are compliant to global standards Citigroup/Salomon Brothers (US investment bank), Hong Kong Assistant Vice President April 1996 – Jul 1998 • Acted as the team leader of AP Communications department • Performed the role of a Network Architect for design, engineering, implementation and support of data centers and the regional corporate infrastructure (LAN + WAN + Voice + Video + Firewall) spreading over Asia Pacific area including Hong Kong, mainland China, Singapore, Korea, Thailand, Taiwan, Australia, Malaysia and Indonesia; Scope of work covered the following:  Firewall standard development and security management  Managing and integrating junior staff to the team  budget preparation and tracking for projects  project management and monitoring  Monitoring & analysing network and PABX capacity & performance;  Isolating & troubleshooting network problems;  Reviewing and setting up network security policy;  Capacity planning for network and PABX growth;  Voice Support including move, add and change of phones and dealerboard and troubleshooting  Getting involved in budgeting cycle;  Liaising with vendors for price negotiation & project deployment;  Designing wiring closet and structured cabling system  BAU – Day to Day support activities such as trading floor/dealing room support, and addition & relocation of phones for users. Key accomplishments: Last Updated on 04/11/16 7/10
  • 8. • Deployed the first corporate firewall solution/infrastructure for retrieving historical financial market data of Reuters Session Services and Internet Access with local web server • Designed and developed firewall network infrastructure for security protection against external network access from joint ventures’ networks in Korea. • Deployed Open Bloomberg system in Hong Kong through the existing Cisco PIX firewall infrastructure and also its delivery to Kuala Lumpur office through intranet. • Led the development of in-house security system that incorporates state of the art technology in authentication, authorization and accounting of remote dial-in access by the use of Ascend MAX4000s and SecureDynamics ACE Server and one-time token password (SecureID card). • Designed and proposed for LAN re-engineering with Cisco Catalyst 5500 series Ethernet Switches in Hong Kong for performance enhancement, ease of management and additional support of multimedia delivery. • Migrated analog voice recorder to MERCOM digital voice recorder • Expanded IPC dealerboard system for accommodation of additional 100 trading desks • Expanded Lucent PBX • Developed the regional strategy and network infrastructure for ISDN backup to international leased circuits connecting to different satellite offices. • Initiated the restructuring of the existing global DNS system and taking a regional lead role in its implementation. • Managed the consolidation and the relocation of disparate networks in 2 branch offices at 2 Pacific Place in Hong Kong for cost savings: • Developed a network management system for monitoring of network capacity and alerting of system failure by customising and integrating a set of public domain network management software (MRTG) from the Internet. • Established an inter-office ISDN connection between 2 branch offices in Sydney, Australia. • Planned for Triarch roll-out in Singapore office for delivery of real time market data, and deployment of Reuters Session Services for delivery of historical market data. • Designed for roll-out of remote access services for home users in Singapore and guided remote technical staff on the project development and deployment including training on equipment configuration. • Developed a feasible solution for remote access to the Salomon Network from Hong Kong Futures Exchange. The whole system has been built with a remote notebook computer running Windows NT 4.0 connecting to a Cisco router at central site over ISDN. By using Multilink PPP 2 ISDN B channels are aggregated into a bundle of 128Kbps so as to provide throughput for bandwidth-intensive X Windows application. • Migrated from old-fashioned standalone Reuters RT terminals to its networked version running on Windows NT machines. • Led the implementation of a network infrastructure for Reuters Select Feed + (RSF+) services for accessing to real time financial market data. • Investigated a solution for graceful co-existence of Reuters Select Feed and Reuters Select Feed Plus financial market data services by distributing UDP broadcasting packets to different segments. • Implemented a network management and monitoring system with HP OpenVew and HP Netmetrix in Hong Kong office. Macroview Telecom, Hong Kong Software Engineer/Project Consultant August 1993 - March 1996 • Application software development for banks • Pre- and Post-“ Sales technical activities, Preparation of tender proposal, Network design, Products demonstration and presentation Last Updated on 04/11/16 8/10
  • 9. • network installation and implementation, product evaluation and testing and in-house Novell LAN and ORACLE database administration Key Accomplishments: • COPUT for Standard Chartered Bank Sole embedded application developer for automatically updating customers’ bank passbooks by COPUT over a SNA/LU0 session via SDLC multi-drop lines. . • COPUT for Thai Farmers’ Bank Sole embedded application developer for automatically updating customers’ bank passbooks by COPUT over a SNA/LU0 session via SDLC multi-drop lines. • COPUT for Bank of East Asia Sole embedded application developer for automatically updating customers’ passbooks by COPUT with 3270 terminal emulation on IBM LANDP over Token Ring network. • Directed the development of in-house inventory control system on ORACLE database • Designed and implemented a network system for an Internet service provider (ISP), which is trying to provide Internet access services to the public in mainland China; • installed and maintained Novell Netware file servers, SUN SPARC servers, ORACLE7 server, and E-mail system for internal and external communication through the Internet • Worked with a project team from ORACLE to implement a benchmark set-up for demonstrating how mission critical client/server computing can effectively offload processing from IBM mainframe using Netwise’s state of the art middleware, Remote Procedure Call. This was to compete with Sybase & Informix teams for the tender from Hong Kong Immigration Department. • Proposed a router based IP network to interconnect around 300 remote branch offices of Ping An Insurance Company, spreading over the country by using Cisco routers over public X.25 services, dial-up lines and private leased circuits; Offered a series of tailor-made training programs to a class of over 50 trainees from the company. TRAINING PROGRAM ATTENDED: Cisco Systems - Cisco SNA configuration for multi-protocol administrators - IPv6 Fundamentals, Design and Deployment Checkpoint - Advanced Firewall-1 4.0 Management (CCSE) - Advanced Firewall-1 4.0 Management (CCSA) Microsoft - Implementing and Administering Microsoft 2000 Directory Services (MS2154) - Designing Microsoft Windows 2000 Directory Services Infrastructure (MS1561) - Implementing Microsoft 2000 Network Infrastructure (MS2153) - Implementing Microsoft 2000 Professional and server (MS2152) - Programming Microsoft SQL server 2000 Database (MS2073) - Administering Microsoft SQL Server 2000 Database (MS2072) NICE – voice recording - NICE Interaction Management 4.1 – NICE Certified System Administrator Standard Algorithmic Research, Israel - CryptoKit Product Training (Encryption Software and Tools) Last Updated on 04/11/16 9/10
  • 10. Learning Tree International - Project Management Skills for Success: Hands-on Netwise, Inc (US middleware vendor) - Using Netwise RPC Tool with Windows - Using Customization with Netwise RPC Tool - Network Computing using Netwise RPC Tool - Using Netwise System for Mainframes: MVS/IMS & MVS/CICS The Hong Kong Polytechnic University - Video Games Development (Game Programming) PRODUCT KNOWLEDGE: Network: Cisco, Juniper, F5, Huawei Security: Checkpoint, Fortinet, Juniper, Cisco, Bluecoat, Pala Alto, Huawei Voice: Avaya/Lucent, Asterisk, IPC, NICE, VoIP Server: Sun Microsystem, Intel X86 Application Server: Oracle, MySQL, SQL server, Active Directory, Apache Tomcat Market Data: Reuters, Bloomberg OS: Microsoft Windows, Unix, Linux, Embedded Linux, IBM OS/2 Middleware: Remote Procedure Call, RMI Programming Language: C, C++, Pascal, Java, HTML Cloud: Openstack Last Updated on 04/11/16 10/10