Open to opportunities

andrew fabonan

@andrewfabonan

Business Information Security Officer at Citi Philippines who strengthens cyber risk governance and enables secure business operations.

Philippines

Message

What I'm looking for

My mission is to partner closely with business leaders to protect critical assets, data, and reputation by aligning information security with business objectives and regulatory expectations. I seek to deliver a risk-based, pragmatic approach that strengthens controls, enhances resilience, and enables secure adoption of emerging technologies without impeding operational efficiency.

At Citi Philippines, I lead information security risk assessments and governance as a Business Information Security Officer, helping protect the firm’s assets and reputation while supporting business objectives. My work includes resolving audit issues, managing risk exceptions, and improving executive risk visibility.

Earlier at Citi Philippines, I provided security oversight for third-party connectivity and governed changes to business-critical infrastructure. I also designed a cross-training program for newly formed ISO teams and delivered security awareness sessions across the business.

Experience

Work history, roles, and key accomplishments

Current

Vice President – Business Information Security Officer

Current

Citi

Jul 2022 - Present (4 years 3 months)

Led comprehensive risk assessments and managed critical information security issues, ensuring compliance and enhancing security posture. Oversaw risk exceptions lifecycle and developed IS policies and procedures.

Risk Assessment Governance Compliance Audit Management Policy Development Third Party Risk Security Awareness Cloud Security Infrastructure Security

Assistant Vice President – Senior Information Security Analyst

Citi

Oct 2015 - Jul 2022 (6 years 9 months)

Conducted in-depth risk assessments for firewall, proxy, and remote access requests, ensuring compliance with security standards. Collaborated with technology teams and piloted system enhancements.

Risk Assessment Firewalls Proxy Remote Access Network Security Compliance Project Management Illumio CMP Resolve IT

Cybersecurity Change Manager

Citi

Jan 2013 - Oct 2015 (2 years 9 months)

Governed security changes impacting critical infrastructure, ensuring risk-appropriate design and controlled implementation. Managed incident and problem resolution for perimeter security operations.

Change Management Incident Management Problem Management Checkpoint Juniper Palo Alto Networks Blue Coat Cisco Remote Access

Senior Network Security Analyst

Regus Service Centre Philippines BV

Feb 2011 - Jan 2013 (1 year 11 months)

Provided expert configuration, fault analysis, and resolution for core LAN, WAN, Wireless, and Firewall infrastructure across global centers. Managed incident lifecycle and collaborated with service partners.

LAN WAN Wireless Firewalls IP phones Incident Management Network Security

Network Engineer / Team Manager

PCCW Teleservices

Mar 2008 - Jun 2011 (3 years 3 months)

Provided Tier 1 and Tier 2 help desk support for global Telco clients, resolving technical issues and ensuring customer satisfaction. Managed email alerts and maintained customer service relations.