Download PDF


To obtain a position that utilizes existing experiences, good interpersonal skills and to be in an environment that provides opportunity for growth and enhance current skills..

Work experience

Jun 2009Present

Information Security and Risk Officer

Hewlett Packard Enterprise Services

Key Responsibilities

Risk Management & Compliance

  • Project Security Assurance – Compliance assurance.
    • To review projects compliancy against Security Policy and Standards.
    • Identifying and analyzing vulnerabilities and threats by conducting Threat and Vulnerability assessment.
    • Consultation at various milestone of project for endorsement/sign off.
    • Tracking Project's Security Assurance and endorsements.
  • Process improvement, Project Tracking , Service Level Compliance
    • Ever-greening of Information Security Standard template for project compliance.
  • Exception to Policy Consultation and Tracking.
    • Provide Consultative Assistance in Exception to Policy requests.
    • Exception to Policy Tracker.

Security Management

  • Identity and Access Management
    • Process owner for 3rd Party Access Management
    • Perform reviews of of User Access Compliance Tracking and Monitoring and reporting against Service Levels
    • Delivery and assurance of the process complies to Service Levels.
    • IAM - Service Account Policy compliance tracking
    • Process improvement

Supervisor: [email protected]

Apr 2007May 2009

Information Security and Compliance Officer

Hewlett Packard Enterprise Services

Key Responsibilities:

To provide Security Governance, Audit and Regulatory Compliance, Risk Assessment, Security Incident and Escalation management.

The role requirement is to be a consultant to the Service Delivery Teams

  • Focal Point for Information Security related communications, reviews and mitigation covering areas of Network Security, and Business Continuity Recovery Services (BCRS) implementing for Risk Management and Mitigation
  • Overseeing Security Operations for Key Infrastructure Services with focus on vulnerability management, patch compliancy, Virus Protection.
  • Maintain BCP plans and rehearsals
  • Facilitating Audits, reviews and internal assessments. Tracking mitigating actions within the organization until resolution

Promote Collaboration and Communications with Delivery Organization and peers

Supervisor: [email protected]

Dec 2005Apr 2007

Account Security Officer

Hewlett Packard (M) Sdn Bhd

Key Responsibilities:

Coordinating and Implementing Information Security Policies, Standards and Guidelines as Account Security Officer for Ericsson Account Asia Pacific Region.

Security Management

  • Implementation of Sarbanes-Oxley (SOX) security controls for the customer account
  • Monitoring, identifying and review of Server and Client Security Vulnerability using approved System Vulnerability Tools
  • Administration of Vulnerability Management Application.
  • Compliancy review of Identity Management and Access Security policies (e.g. Password Policies,Privileged Access)
  • Security Incident Management (e.g.Policy violations, and non compliances, Security Threats , Virus Problems)
  • Security and Operating System Patch Management
  • Coordinate and collaborate with Incident Management, Change Management and Escalation management teams

Supervisor: [email protected]

Sep 2003Dec 2005

ITO Delivery Engineer

Hewlett Packard (M) Sdn Bhd

Key Responsibilities

Administration of Oracle Databases as Deep Technical Expert

Subject Matter Expert for Configuration Management (CMDB) for Ericsson Account Asia Pacific.Management of Account’s Hardware Asset Inventory.

Data Center Operations for Ericsson Trade Account

Implementing IT Service Management (ITSM/ ITIL) Projects for Ericsson Account.

Service Delivery Operations

  • Providing Deep Level Support for Oracle Database administration including creating, configuring databases as well as backing up and restoring Oracle databases.Databases administered are local as well as remote locations (Japan)
  • Key member of Data Center operations of the Remote Data Center in Kuala Lumpur for Ericsson Account.The role includes working and formalizing processes with partners who provide Data Center Facility as well as with other Account Delivery Managers who want to share data center facilities.

Configuration Management (CMDB)

  • Implement Configuration Management Database (CMDB) in Asia Pacific to track, record and report IT Infrastructure data.The role includes linking up with IT Asset Management and providing accurate information with regards to IT production environment.
  • Successfully created Baseline of Server and Storage Inventory and processes to track, maintain and report Operations Manager for Ericsson Account in HP.

Implementation Lead, Internal Projects

  • Responsible for implementing assigned projects assigned by Implementation Board for Ericsson Trade Account.This role includes identifying, planning and implementing projects based on the Customer Requirements
  • Assisting Global Account Program Managers, implementing sub-projects within Trade Account
May 2000Sep 2003

Database Engineer

Ericsson Global IT Services

Key responsibilities

Manage Oracle Database as an expert support in administering the database

Responsible for the operations of Data Center effectively and efficiently

Project Engineer for Remote Site & Server Operations (APAC Consolidation Initiative)

Server Operations, Database Engineer

  • Primary responsibilities to install, maintain, upgrade Oracle databases on Sun Solaris Platform Servers
  • Establish and maintain backup and recovery plans and procedures for the database
  • Implement and maintain database security and perform tuning when needed
  • Setup and maintain documentation, collaborate as a global team
  • Work as a technical expert in trouble shooting and resolving database issues.

Project Management, Project Engineer:

  • Lead Implementation of Data and Network Cabling Infrastructure Upgrade of the Ericsson Data Center
  • Facilitate teams from Network, Server Operations and Facilities Operations.
  • Planned, coordinated and implemented successful Server Room Re locations for Ericsson Singapore.
  • Coordinated teams from design, Networking, Facilities, Server and Logistics.
  • Project Member in Server Consolidation Program and Managing in a Lights Out Environment

Data Center Operations, Executive

·Developing and formalizing processes and reporting relationship between customers and the Data Center.

  • Hardware resource management for the data center
  • Ensuring a viable costing model of the Data Center and charging processes to run the Data Center.
  • Space Utilization and Operational Cost Optimization
Jun 1998Apr 2000

Senior Executive

Multimedia Information Resources Sdn Bhd

Key responsibilities

Collaborative Project Management for Desktop and Software Refreshment.

Product Expertise and Support

Project Management

  • Co-Project Managed in the implementation of Desktops and Software in collaboration with Telekom Malaysia Berhad to implement key IT Projects for the Melaka State Government.
  • Rollout of Workplace Desktop and approved Softwares for the Melaka State Government and State Secretariat.
  • Coordinating end to end from RFQ and RFP, with multiple vendors, until user acceptance and sign off by the State.
  • Product evaluation and testing of solution’s required by the Melaka State Secretariat.
  • Coordinated with the Company Secretary to legally establish the subsidiary, and clearances from all regulatory and statutory authorities.
  • Manage Procurement of Project materials and logistics of hardware and software for the office in Ghana
  • Pre-sales and post-sales support on inSight, an EIS development tools for SAP R/3 environment.
  • Manage and maintain existing IT systems in the office, where includes Operating systems and Local Area Networks
Jan 1995Jun 1998

Technical Specialist

GroupWare 2000 Sdn. Bhd

Key responsibilities

Job scope involves pre-sales and post-sales support of Oracle Workgroup Server

Application Prototyping & Programming of Oracle Workgroup/2000 Product Suite.

Key Projects & Prototyping implemented.

·Developed Graphical User Interface (GUI) for SAP R/2 application for Petronas Malaysia

  • Developed a Graphical User Interface mask for SAP R/2 application module.
  • Documenting Technical Manual, Functional Manual and End User Guide
  • Application was implemented successfully within estimated time and budget.
  • Development tools used:
  • Phantom and Rexx Language
  • OS/2 Warp and Windows Operating System environment.

·Built Conference Registration software System for the Tourism Board of Malaysia

  • Developed the prototype
  • Presented the prototype to the Tourism Board.
  • Developed using
    • Oracle Power Objects
    • Oracle Workgroup Server.

·Automated New Subscription tracking and implementation System.

·New Services Subscription Application for International Value Added Services (IVAS) group in Telekom Malaysia Berhad.

  • Development tools used:
  • Oracle Power Objects
  • Oracle Workgroup Server
Oct 1994Dec 1994

Customer Service Executive

Indah Water Konsortium

Key responsibilities:

Handling and assisting customers with billing problems and complaints pertaining to services the company was rendering

Maintaining Quality and time to resolve or escalate issues in keeping with service level set by the management.

Resource planning Customer Service staffs

Aug 1992Sep 1994

Help Desk System Administrator

Solsisnet Sdn Bhd (subsidiary of Dataprep Holdings)

Key responsibilities

Main point of contact for the customers in providing first level support on hardware and software.

Logging and tracking issues reported to the Help Desk until resolved.

Assigning resources to resolve issues reported to Helpdesk

Maintaining IT assets and test / loan equipment's




ICL Training Center


RSA Archer Administration
RSA Archer eGRC Smartsuite
Microsoft SQL Server 2000
Enterprise Security Manager (ESM)
Oracle Databases



ISO27001 Lead Auditor

International Register of Certified Auditors (IRCA)

Foundation Certificate in IT Service Management


Certified Information Systems Security Professional (CISSP)