Information Security Manager
Resume:
BERNARD THEO P. JANDA
Blk **, Lot ** Libra St. Panovamaville Subd.
Sta. Rosa, Laguna 4026 Philippines
******.*****@**********.***
CAREER SUMMARY
-
An IT professional with over two decades of experience in various aspects of the IT Infrastructure of one of the largest banks in the Philippines. Extensive experience in planning, implementation, support and security assessment of various IT systems. Proficient in IT Infrastructure Design, Management and Administration, IT Risk Assessment, Application and Infrastructure Vulnerability Assessments, Policy Formulation, Information Security Awareness and Cyber Security Operations. WORK EXPERIENCE
-
July 2015-Present
Information Security Incident
Manager / Level 2 SOC Officer
Metropolitan Bank & Trust
Company (Metrobank)
Makati City, Philippines
Handles reported and detected information security incidents involving the bank systems and infrastructure that goes beyond SLA and those that are beyond the capabilities of L1 Analysts to handle.
Works closely with the bank’s fraud team to identify and mitigate security weaknesses that are being exploited by fraudsters.
Operate and administer the bank’s enterprise Security Information and Event Management (SIEM) system including use case creation and management.
Established and manages the banks Computer Security Incident Emergency Response Team
(CSIERT).
Liaises with banking units that are affected by on-going incidents in order to strategize to contain and neutralize them.
Liaises with the bank’s subsidiaries to coordinate incident handling and response and share cyberthreat intelligence.
Authored majority of the Incident Response Playbooks and Guidelines currently in use by the team.
Writes other InfoSec-related policies, procedures and guidelines as required by the SOC, CISO and the bank.
Performs InfoSec-related knowledge-transfer to junior officers and other bank personnel.
Conducts InfoSec Awareness lectures for new and existing employees as requested by HR. June 2011-July 2015
Security Infrastructure Management
Officer
Metropolitan Bank & Trust
Company (Metrobank)
Makati City, Philippines
Performed vulnerability assessment and penetration testing on new and existing banking applications and infrastructure.
Performed end-to-end security assessment on various banking critical projects.
Involved in the change control process by reviewing proposed changes to the system before implementation.
Performed various types of Information Awareness Training for Metrobank employees
Established and enforced baseline security standards for various Operating and Database systems used by the bank.
Performed security evaluation of design documents and change control documents for various I.T. projects.
Authored various policies, procedures and guidelines for managing and securing the IT infrastructure of the bank.
Involved in evaluating security products and services applicable to the bank’s environment. April 2008 – June2011
Information Security Manager
MBTC Technology, Inc. (MTI) Makati City, Philippines
Performed vulnerability assessment and penetration testing on new banking applications before turning over to Metrobank for implementation.
Authored various baseline security policies for different systems (OS, DB, appliance, etc.
Held Information Security Awareness Trainings for MTI and select Metrobank employees. April 2007 – May 2008
Information Security Specialist
MBTC Technology, Inc. (MTI) Makati City, Philippines
Performed vulnerability assessment and penetration testing on new banking applications before turning over to Metrobank for implementation.
Assists the System Administrators in implementing baseline security standards on systems they are responsible for.
Established different technical Information Security policies of the company December, 1995 - May, 2007
Open Systems Specialist
MBTC Technology, Inc. (MTI) Makati City, Philippines
In charge of the systems and security administration of all the company’s servers (OS, DB and applications)
Ensures proper operation of all systems and maintains the system interconnection with Metrobank.
Established various policies and standards in relation to the systems being maintained. May, 1995 - December, 1995
LAN Support Supervisor
Philippine Database &
Services, Inc. (PDSI)
Pasig City, Philippines
Ensures the 99% availability of the network
Manages the network administrators of the company including schedules, training and personnel administration.
Installs and maintains servers as required by various projects being handled by the company. November 1992 – May 1995
LAN Support Personnel
Philippine Database &
Services, Inc. (PDSI)
Pasig City, Philippines
Established the first local area network installation of the company.
Ensures the 99% availability of the network
Research various methods of ensuring the high availability of the systems being maintained. April, 1992 - November, 1992
Assistant Shift Supervisor
Philippine Database &
Services, Inc. (PDSI)
Pasig City, Philippines
Manages/tracks documents that are distributed among the encoders.
Performs random checks on encoded documents to ensure accuracy and completeness
Takes charge of the shift operations in the absence of the Shift Supervisor
Created a semi-automated workflow that copies and organizes encoded documents, allowing for easier merging and submission to clients.
March, 1991-April, 1992
Data Encoder
Philippine Database &
Services, Inc. (PDSI)
Pasig City, Philippines
Encodes various documents (English and non-English) to formats required by the project.
Prelimary editing of encoded documents prior to processing.
-
-
PUBLICATIONS
-
Formerly a regular article contributor to the technology-lifestyle magazine Mobile Philippines and The Reviewer (Hinge-Inquirer Publishing).
EDUCATIONAL ATTAINMENT
-
Sta. Catalina College Bachelor of Science in Business Administration
1986-1990
Mapua Institute of Technology Electronics & Communications Engineering (undergrad)
1985-1986
University of Sto. Tomas High School 1981-1985
Dominican School Manila Intermediate 1978-1981
Immaculate Conception Academy
of Manila
Primary 1975-1978
TECHNICAL TRAINING
-
SANS SEC511: Continuous Monitoring and Security Operations March 2016 SIEM Training November 2014
ENCASE Computer Forensics November 2008
ISO:27001 Lead Auditor in ISMS January 2008
Certified Penetration Testing Professional February 2006 Implementing & Managing Microsoft Exchange 2003 July 2004 Managing and Maintaning MS Windows Server 2003 Environment June 2004 Planning, Implementing and Maintaining a MS Windows Server 2003 Active Directory Infrastructure
June 2004
IBM Internetworking Fundamentals: Hands-on Workshop June 2002 Microsoft Exchange Server 5.5 – Design & Implementation June 1999 Microsoft Exchange Server 5.5 – Concepts & Administration June 1999 Internetworking on Microsoft TCP/IP April 1999
Administering Microsoft Windows NT Server 4 February 1999 Supporting Microsoft Windows NT 4 Core Technologies January 1999 NCR TOP END May 1998
-
CERTIFICATIONS
-
● ISO:27001 ISMS Lead Auditor
● Certified Penetration Testing Professional
PERSONAL DATA
-
Date of Birth: July 1, 1968 Civil Status: Married
Place of Birth: Manila, Philippines Gender: Male
Interests: books, movies, mobile/handheld/wearable computing, white hat hacking REFERENCE
-
Atty. Laarni Bernabe
VP-Treasury Strategic
Support Division
Metrobank +632-*-***-****
Sheila Ramos
Sr. Manager
Fraud Management
Deivision
Metrobank +632-*-***-****
Paul Phy
Vice President
Elecon Construction Corporation +63-917-***-****
Contact this candidate