Alvin Philip Prina

Cyber Threat Manager @EY

Toronto, ON, CA

Lead and coordinate incident response (IR) engagements, including high-severity ransomware incidents, ensuring rapid containment, eradication, and recovery processes.2. Drive improvements to Cyber Threat Intelligence (CTI) processes by optimizing how Indicators of Compromise (IOCs) are ingested, validated, and operationalized in the enterprise SIEM, improving threat visibility and detection rates.3. Partner with Detection Engineering teams to design and fine-tune detection rules, playbooks, and alerting mechanisms to improve threat detection efficacy.4. Manage 24x7 SOC operations, ensuring adherence to SLAs, optimizing incident triage processes, and enhancing analyst workflows to improve response times and accuracy.5. Oversee the end-to-end Vulnerability Management lifecycle, including risk prioritization, remediation planning, reporting, and executive communication.6. Perform Vendor Risk Assessments by evaluating third-party cybersecurity controls and their compliance with organizational risk appetite and regulatory requirements.7. Develop and report on key performance indicators (KPIs) across incident response, SOC operations, vulnerability management, and vendor risk domains to executive stakeholders.8. Deliver actionable monthly and ad-hoc cybersecurity reports focused on performance, threat trends, and risk posture improvements.9. Identify and implement service and workflow enhancements to improve operational efficiency, client satisfaction, and service availability.10. Contribute to the preparation of statements of work (SoWs) and service proposals, applying deep operational knowledge to align offerings with client needs.11. Champion continuous improvement by leading initiatives to standardize SOC procedures, improve risk management frameworks, and strengthen incident response capabilities.

Mapúa University

Master's degree, Computer Science