Simon Chow

Major duties and achievements: • Tailored and secured 7 IT solutions (e.g. game servers, web developments and event marketing) for different events and projects, and continuously monitored and remediated various security issues such as DDoS, hacking, EDM email security and credential management. • Analyzed security event data through SIEM and responded with SOAR and a few manual actions. • Provided remote technical support on different technologies, e.g. Zoom meetings and webinars, as well as different web applications, to 4 social service projects with different partners and discovered the possibilities of service development with IT.

• Pioneered the development and implementation of advanced security guidelines and initiatives, such as IAM, RBAC, SSO, MFA and MDM/MAM (Microsoft Entra ID (formerly AAD), Intune and Apple Business Manager), PIM and PAM (CyberArk, Delinea), CASB/CSPM (Microsoft Defender for Cloud), and SIEM, for Zung Fu and sister companies within parent group Jardine Matheson Ltd. • Implemented and utilised Palo Alto Cortex XDR, Microsoft Sentinel and Microsoft Defender and Accenture’s managed security services SOC as MDR/EDR/XDR, SIEM and SOAR solutions, and created automated security incident playbooks, expediting incident response time by 20%. • Collaborated with DevOps Team to develop and implement security baselines, KPIs and guidelines for cloud-based applications, both internally developed and vendor-supplied, including key and certificate management with Key Vault, to ensure adherence to best practices and security standards like NIST CSF, DISA STIG and CIS throughout the Software Development Life Cycle (SDLC), conducting security code reviews, and analysing vendor risk and customer relationships. • Partnered with Infrastructure Team and IT Helpdesk Team to manage security operations for major IT development projects, including secure email gateway (Mimecast), Microsoft 365 configuration review, mobile device management (MDM) policy and adoption of secure network infrastructure on Microsoft Azure and on-premises infrastructure. • Secured company application and IT infrastructure by integrating vendor MSS SOC and VMDR tools (Qualys and Tenable Nessus) and penetration testing, proactively addressing security alerts, security investigation, and vulnerabilities to uphold compliance with NIST, DISA STIG, CIS and other security standards. • Secured company on-premises network composed of servers, firewall, Wi-Fi, Cisco routers and switches, with access control lists, CMDB and network configuration management (NCM) tools.

• Implemented SIEM and SOAR for the automation of abnormalities detection and remediation. • Secured the company’s network and IT infrastructure with different MSSs for any ad-hoc security alerts and vulnerabilities and execute mitigation and remediation when needed. • Formulated and enforce various security policies and standards in office, such as WFH policies, AUP of the company’s OpenAI project, DLP and network settings. • Cooperated with Application and Infrastructure team for related security requirements, such as baseline for new servers, applications and websites.

Major duties and achievements: • Provided remote technical support on different technologies, e.g. Zoom meetings and webinars, office applications, VPS/VM/Docker and cloud solutions to over 15 social service projects with different partners including NGOs and post-secondary institutions, and discover the possibilities of service development with IT. • Provided IT desktop support to partner companies on various issues e.g. computers, network infrastructure (Wi-Fi and wired connections) and printers.

Major duries and achievements: • Responsible for on-site technical support (e.g. MS Office, network connectivity, OS troubleshooting, desktop support) to all 30+ workstations, mobile devices, network infrastructure and servers of the centre following the government’s standards and policies. • Collaborated with website design company for the Centre’s new website development, and took charge of webserver maintenance and security after launch.

Major duties and achievements: • Streamlined statistic reporting workflows with Excel and CRM system for project workers’ convenience. • Assisted with project website design, management, maintenance and security issues. • Helped in maintaining and troubleshooting IT system within the organization to provide stable IT-working environment, such as Active Directory, Wi-Fi and M365 setup.

Major duties and achievements: • Collaborated with over 50 institutes (schools, universities, companies) to create tailor-made IT development projects such as IoT and smart campuses. • Developed IT education curriculum with latest materials and trends such as computer networking, programming and cybersecurity for youths with different backgrounds, and provided related IT training to over 180 teachers and tutors. • Led a after-sales support group of the company's IoT development projects.

Major duties and achievements: • Maintained and upgraded IT infrastructure such as computer management system, server backup and maintenance, video conferencing for 80+ staff members plus church service audience. • Performed on-site and remote diagnosis and support to 80+ workstations at 6 different locations on technical issues such as computer setup, email, file systems and network connectivity. • Upgraded hardware on different computers such as iMacs, MacBook Pros and Windows-running workstations, and facilitated Microsoft 365 migration. • Implemented web-based Wi-Fi authentication management system with RADIUS.

Developed social platform and a charity project website reaching totally 50k+ views in a month after launches