Head of Information Technology
Current
Bank Negara Indonesia · London Branch
IT Strategy & BudgetProduction EngineeringAWS & TerraformSWIFT gpi & ISO 20022CybersecurityPRA / FCATeam Leadership
Lead the London branch technology function for a PRA/FCA-regulated banking environment while concurrently owning accounting close and financial reporting.
- Own application deployment, configuration, monitoring, incident response and change across core-banking interfaces, SWIFT/ISO 20022 messaging, treasury/Murex workflows, regulatory reporting and third-party integrations on Linux, AIX and Windows
- Designed and productionised a secure AWS reporting platform with Terraform and serverless services: S3, DynamoDB, KMS, Lambda, API Gateway, CloudFront, Cognito, SNS, CloudWatch and EventBridge
- Implemented zero-static-credential unattended AWS workloads with IAM Roles Anywhere, non-exportable certificates and PKI, least-privilege role chaining and production acceptance controls under Windows LOCAL SERVICE
- Build and support Python/FastAPI services and automation for reconciliation orchestration, EOD report packaging and publishing, data validation, operational dashboards and regulatory-reporting workflows
- Built a secure SharePoint Online/SPFx reporting portal with automated report delivery, replacing attachment-heavy distribution with controlled, auditable access
- Own end-to-end infrastructure and cybersecurity: data centre, network and SD-WAN, end-user computing, BCP/DR readiness and security remediation; point of contact for risk, audit and regulators
- Coordinate daily with head-office engineering teams and vendors across time zones, maintaining runbooks, architecture and dependency documentation and audit evidence; manage strategic vendors including IBM and EY
Selected achievements
- Reverse-engineered an undocumented Fiorano ESB SWIFT gpi Universal Confirmation flow from Oracle and message-archive evidence, recovering 7,932 historical confirmations, and replaced it with a fail-closed Python/Oracle service: approximately 2,000 live confirmations with zero SWIFT-interface rejections
- Eliminated a legacy query that expanded to roughly 243 million rows (about 31,109x amplification) with auditable deduplicated selection and explicit ambiguity handling
- Owned post-go-live reliability engineering across eight production incidents: bounded database timeouts, progress-based watchdogs, snapshot-scoped Oracle reads, recovery tooling; 12 automated regression suites and 45 design and forensics documents
- Delivered staged IT centralisation with approximately 30% cost reduction and zero data loss across migrated systems
- Embedded validation, reconciliation and anomaly alerting into data pipelines, cutting recurring manual reconciliation effort by approximately 75%
- Delivered production-grade secure report publishing with idempotent S3/DynamoDB verification, reconciliation gates and certificate-based unattended authentication
- Supported the Murex treasury go-live and automated downstream F1 rate and report integration with EOD timing, file-date and reconciliation controls
Environment: Python 3.12, FastAPI/Uvicorn, pandas, Selenium, SQL/PLSQL, Oracle 11g, python-oracledb, MySQL, SQLite WAL, Linux, AIX, Windows Server, Windows Services/pywin32, DPAPI/Windows Credential Manager, SMB, AWS (IAM Roles Anywhere, S3, DynamoDB, KMS, Lambda, API Gateway, CloudFront, Cognito, SNS, CloudWatch, EventBridge), Terraform, PowerShell, Docker, Git/GitLab/Jenkins, SharePoint/SPFx, Microsoft Graph, SWIFT MT/MX/gpi, MT199/MT103, UETR, Finastra, ISO 20022, Murex.