Anthony Choy, Kum - Tong

Headed the establishment and P&L operation of IT Governance and Portfolio & Program Management Offices for Avaya and AT&T, building integral policies, standards, processes, controls, and metrics from inception.

Directed the program management and implementation of Organizational IT & Cyber Security Risks and Controls, enhancing the security postures of all ICT systems and operations.

Conducted comprehensive security gap analyses and technical reviews, identifying and mitigating critical IT & Cyber Security risks to improve organizational security posture and maturity.

Collated, validated, and reported key security matrices, risk indicators, and findings at the global level using Metric Stream GRC toolkit, providing transparent oversight.

Customized and executed annual ISO27001 ISMS, NIST, CISA, and CSTA Audits, Assurance & Reporting, ensuring compliance with corporate security policies and directive requirements.

Measured and improved organizational IT Portfolio & Program Management competency levels, elevating PMO Continuum from Monitored to Optimized, boosting customer confidence and business performance by up to 70%.

Instructed and coached corporate clients on IT Program & Project Financials, Earned Value Management (EVM), and Program/Project Recovery methodologies.

Delivered training on ISO 38500 IT Governance, ISO 27001 ISMS Audit & Certification, NIST, CISA, COBIT Controls, and ISO9001 IT Quality Assurance & QMS frameworks.

Educated teams on PMI Organizational Program & Project Management Maturity Model (OPM3) and PMBOK Framework & Methodology for improved project delivery.

Assessed and guided organizational PMO competency, capability, and maturity using PMI OPM3 Product Suite® Toolkit for strategic improvement.

Customized and implemented ISO38500, ISO27001, NIST, CIS, and CISA IT & Cyber Security Risks Audit & Assurance Frameworks, enhancing regional security postures.

Led the development and adoption of enterprise-wide Risk Frameworks, Directives, Methodologies, Processes, and Requirements, ensuring compliance with ISO27001, PCI-DSS, PDPA, and other privacy laws.

Provided strategic risks advisory and guidance to CXOs and stakeholders, actively shaping cyber risk strategies and roadmaps across the organization.

Program-managed and implemented the Enterprise Cyber Security Program, including Tabletop Simulation exercises, to safeguard against internal and external threats and vulnerabilities.

Planned, coordinated, and executed annual ISO 27001 ISMS / NIST / CIS / CISA audits, assessments, and reporting, verifying alignment with security architecture models.

Established and supervised formal vulnerability management, penetration testing, and security posture assessment programs, proactively identifying and addressing risks.

Directed and P&L-executed Global/Regional multi-phased Systems & Software Integration and Telecoms programs with a Total Contract Value (TCV) of SGD 45M.

Ensured consistent, predictable, and transparent program delivery with minimal escalation across a portfolio of highly correlated and interdependent programs.

Managed IT PMO governance, methods, P&L operations, and reporting, optimizing demand fulfillment, resource scheduling, and workload balancing.

Implemented organizational IT Balanced Scorecard KPI Measurement & Reporting to align IT performance with strategic business objectives.

Oversaw the full lifecycle of consulting and integration service delivery, from pre-contract and requirements analysis to scoping, planning, execution, and closure.

Managed project financials, costing, scheduling, and controls, ensuring projects remained within budget and on schedule.

Implemented robust monitoring, tracking, and reporting mechanisms for all program phases, providing transparent updates to stakeholders.

Facilitated seamless transitioning and handover of completed projects, ensuring operational continuity and client acceptance.

Led consulting teams in delivering complex technology solutions, advising clients on strategic IT initiatives and system optimizations.

Managed client relationships and project delivery, ensuring high levels of satisfaction and successful outcomes for technology implementations.

Developed and presented solution proposals, aligning technology capabilities with client business objectives to achieve tangible results.

Provided expert guidance on enterprise system and network architectures, enhancing client infrastructure and operational efficiency.

Consulted with Banking & FSI clients on critical enterprise system and network infrastructure projects, ensuring high availability and security.

Designed and implemented robust network solutions, optimizing performance and reliability for financial transactions and data integrity.

Analyzed client requirements and recommended tailored technology solutions to meet specific industry regulations and business needs.

Collaborated with project teams to ensure seamless integration of new systems within complex financial environments.

Implemented and integrated JDE and Oracle EBS ERP solutions, optimizing business processes in manufacturing, logistics, and supply chain.

Developed custom software modules and configurations to meet specific operational requirements and enhance system functionality.

Provided technical support and troubleshooting for ERP systems, ensuring smooth operations and minimal downtime.

Collaborated with cross-functional teams to analyze business needs and translate them into effective ERP system improvements.

Implemented and configured BPCS ERP modules, streamlining business planning and control processes across Southern Asia operations.

Developed and maintained software applications, ensuring alignment with business requirements and improving operational efficiency.

Analyzed system performance and user needs, proposing and implementing enhancements to the ERP system.

Provided technical support and training to end-users, facilitating effective adoption of new ERP functionalities.