Bernard Chan

Information Security Manager @ Vyond

About

(Note: This is essentially my curriculum vitae - at present I am not actively seeking but keeping the doors open to interesting career opportunities.) A web application developer turned into an information security professional, I have always been keen in striving for excellence through continuous learning and improvement, as well as implementation of best practice, and demonstrated meticulousness and full dedication in all of my past and current endeavors. I also profess the virtue of knowledge sharing for team success. As a developer, I strive not merely for code that works, but also ensure components are built with clear separation of concerns, high flexibility and reusability in mind, the very tenets to the construction of reliable and scalable web applications. As a security professional, I favor explaining whys instead of just hows, not only to secure stakeholder buy-in, but also out of my commitment toward knowledge sharing and my belief that effective implementation of information security requires the collaboration of everyone. I have a great interest in a variety of information security topics. My specialty has always been on web application vulnerabilities, although in my recent role I started to dedicate more effort on GRC (governance, risk, compliance). My attention to details often overlooked by others also helps in refining the design and implementation of web applications for security. I am open to exciting career opportunities that allow me to partake in enhancement of information security at large, especially environments that involve extensive deployment of sophisticated web applications or cloud applications, with opportunities to assume some leadership responsibilities in the roles I might be landing. I am comfortable with managing systems and developing from the Linux command line. I was appointed as moderator at one of the largest international Unix forums online in 2003 and remained in the position for 5 consecutive years.

Country

City

Hong Kong SAR

Industry

Information Technology & Services

Skill

Artificial Intelligence (AI), Data Governance, IT Governance, Linux, Perl, PHP, MySQL, Java, Web Applications, Object Oriented Design, Apache, Information Security, Web Application Security, Linux System Administration, Unix Shell Scripting, Internationalization, Amazon Web Services (AWS)

Experience

Information Security Manager

Vyond

2009-5 - Present · 17 yrs 5 mos

Hong Kong

Vyond (previously GoAnimate) is an online platform encompassing a suite of tools that allows businesses to make animated videos easily for communication, without requiring drawing skills and the use of expensive graphic software. GoAnimate was among the winners of HKICT awards 2012 and 2017. We were awarded the Best Collaboration Grand Award in 2012 through our previous collaboration with YouTube LLC. We were awarded the Best Business Solution Grand Award as well as the Award of the Year in 2017. The needs of the company shaped my career path. I started out joining the small team startup as a web developer with systems operations role, participated in the development and maintenance of the corporate website as well as hosted applications for valued partners such as YouTube, deployed on cloud infrastructure powered by Amazon Web Services (AWS). Gradually transited to a role focusing more on IT infrastructure and security from multiple facets following the tremendous growth of the company. I was responsible for establishing and maintaining the corporate information security program. Specific highlights include supplier risk assessment, main contributor of information security due diligence activities from enterprise customers, drafting security enhancement proposals through evaluation of risk posture, and advising senior management and departmental stakeholders on security-related matters. Also responsible for managing the corporate initiatives with respect to security compliance including maintenance of security certifications that involve all business units across different office locations. With an APAC IT management role, I also coordinated the liaison with US IT team to better enforce uniformity and alignment of IT policies and procedures across locations, as well as researched avenues of automation and implemented PoCs to streamline various mundane and repetitive IT daily workflows.

Software Engineer

Mobile Clusters Limited

2006-1 - 2009-3 · 3 yrs 3 mos

- Software architect of the corporate VoIP voice infrastructure. Job duties included development of Perl programs for backend processing, integration of SIP servers such as Asterisk and OpenSER, as well as designing other supporting infrastructure for flexibility and scalability. - Established a flexible infrastructure based on the Spring application framework to power the corporate Web site, utilizing open technologies such as JSP, Apache Tiles and JPA, with round-the-clock monitoring and anomaly alert facilities backed by JMX.

Analyst Programmer

EDI Systems Services Limited

2004-2 - 2005-12 · 1 yr 11 mos

- Project coordinator who oversaw the integration of two freight forwarding systems (ColdFusion and Java) onto a single platform (PHP5) with limited resources and tight deadline constraints; and participated in subsequent development of new features and refactoring of the resulting code base for better code and higher component reusability. - Principal architect of the underlying application framework which served as the basis of future development projects, written in PHP with flexibility in mind. - The chief researcher of new technologies for later adoption in application development projects.