Jia Wei C.

• Conduct risk assessments on the organization's IT infrastructure and cyber security controls. • Oversee the IT Disaster Recovery activities as an independent observer and report gaps to the management. • Review the company’s ability to withstand and recover from disruption through disaster recovery and business continuity practices. • Involved in audit planning and scoping for each fiscal year. • Design IT audit programs and scopes, and conduct in-depth IT audits and action plan follow-ups in line with predefined SLAs. • Report audit findings to management and Audit Committee.

• Conduct evaluations on the company’s IT infrastructure and processes to reduce cyber risks and ensure a safe and secure working environment. • Evaluate systems and applications to ensure they are controlled, reliable, efficient, secure and effective. • Review the company’s ability to withstand and recover from disruption through disaster recovery and business continuity practices. • Assess the systems development lifecycle and propose solutions and controls to ensure security and efficiency. • Review the accuracy of system-generated data for reporting and management decision-making purposes. • Design IT audit programmes and scopes, and conduct in-depth IT audits and action plan follow-ups to ensure lean, safe and effective operations • Report audit findings to management and department heads and collaborate with them to develop and implement effective cybersecurity strategies

• Responsible to enforce BNM's Risk Management in Technology (RMiT) Policy Document including other related IT regulations under BNM's jurisdiction • Perform IT risk assessment on applications from financial institutions for system enhancements • Provide IT related regulatory input for policy drafts which would go on to be enforced in the industry • Perform risk based regulatory IT audit on financial institutions encompassing areas of IT infrastructure risks, cyber risks, project risks and outsourcing risks along with the efficacy of their corresponding controls

• Perform Incident management and problem management as bread and butter • Responsible for a multitude of SLAs and KPIs of the services portfolio of 5 applications simultaneously • Provides consultancy on technical aspects of aforementioned application portfolio • Assist with quality assurance of application before and after deployment • Liaises with stakeholders responsible for the development of system enhancements to overcome known problems or further fulfill user requirements • Deploy services and enhancements to supported services in accordance with agreed procedures, defined on a project basis • Assist in Application Audit – Security, Functionality and Capacity • Oracle Database Query Fine Tuning – Indexes, Base Plans, Gather Stats • SSL Certificate Renewal • Familiar with the business process of DHL as a logistics company (Ecommerce and Express) • Scripting to automate certain reporting and monitoring tasks • Application performance degradation investigation • Perform sanity testing after major RFC changes

• Providing clients with advice based on PCI DSS and ISO27001 standards • Setting up Arc Sight loggers and responsible for extracting information via queries • Implementing ID-based Arc Sight flex connectors for application integration • Working with Application team to obtain specifications to integrate apps with security appliances • Managing and upgrading Tripwire Enterprise for a major Telco • Resolving escalated tickets from Level 1 for leveraged clients • Security incident handling for leveraged clients • Managing DLP systems

Handled Security Operations Centre monitoring, escalation, and remediation for an overseas financial institution which includes running scheduled Vulnerability Assessment (VA) scans, performing Packet Capture (PCAP) analysis and manual correlation using tools from RSA, Virus Total and more.