Pat Pineda

Strategic Cybersecurity and Resilience Leader with a progressive career at SGV & Co. (EY Philippines) from Associate to Manager. Specialized in Second-Line Risk Oversight, BCM, and Cyber Resilience. Proven track record in implementing Resilience Frameworks aligned with BSP Circular 1203, BSP MORB 951, ISO 22301, and ISO 27001.

Expert in consolidating complex risk data for C-Suite/Board-level reporting, leading cross-functional teams, and building enterprise security strategies for global financial institutions and telecommunications leaders.

Manager in Technology Consulting for Cybersecurity and Resilience at SGV & Co. (2024-01 – Present)

• Designed and delivered C-Suite and Board-level risk reporting for major financial institutions, translating technical testing outcomes into actionable insights on impact tolerances, remediation status, and operational soundness.
• Led client engagements ensuring compliance with BSP Circular 1203 and MORB 951 while managing multiple high-stakes projects ranging from client-facing resilience initiatives to internal firm crisis management and go-to-market activities.
• Direct and oversee the Cybersecurity Learning & Development (L&D) function, aligning technical learning paths with practice growth goals and talent pipeline needs to drive professional development.
• Directed cross-functional consulting teams, coaching and mentoring staff on security architecture, risk management frameworks, compliance standards, and client engagement to ensure high-impact service delivery.
• Managed the full project lifecycle for enterprise resilience engagements, from onboarding and stakeholder alignment to executive reporting and regulatory documentation.
• Designed and facilitated comprehensive cybersecurity bootcamps and specialized technical training sessions for both internal SGV consulting staff and enterprise client teams to build organizational capabilities.

Senior Associate in Technology Consulting for Cybersecurity and Resilience at SGV & Co. (2021-01 – 2024-12)

• Engineered and facilitated C-suite and Crisis Management Team (CMT) tabletop exercises for the Philippines' largest bank, testing response capabilities against Ransomware, "The Big One," Insider Threats, and Supply Chain Disruptions.
• Spearheaded the transition from legacy BCP to integrated Resilience Frameworks across multi-sector conglomerates, mapping critical operations across Technology, People, Premises, Data, and Third Parties.
• Led Failure Mode and Effects Analysis (FMEA) and production-level Chaos Engineering for telecommunications infrastructure, optimizing IT Disaster Recovery metrics (RTO/MTPOD) to handle severe infrastructure outages.
• Directed cross-border insurance resilience projects, validating recovery capabilities via IT DR testing and aligning international operations with ISO 22301 and ISO 27031 standards.
• Coordinated and executed localized crisis simulations with EY Global across seven regional hubs to ensure BCM documentation and protocols remained current and compliant across geographically dispersed operations.

Associate in Technology Consulting for Cybersecurity at SGV & Co. (2019-01 – 2021-12)

• Executed vulnerability assessment and penetration testing (VAPT) engagements across client infrastructure, identifying technical vulnerabilities and delivering strategic remediation roadmaps to management.
• Developed end-to-end BCM frameworks from scratch for Food and Retail companies, establishing foundational Business Impact Analyses (BIA), Risk Assessments (RA), BCPs, and Crisis Management Plans.
• Assisted financial institutions and enterprise clients in evaluating IT controls, conducting risk assessments, and aligning continuity procedures with regulatory requirements.
• Facilitated targeted training sessions and workshops for critical personnel to strengthen organizational readiness and scenario-based crisis leadership.

Bachelor of Science in Information Technology – De La Salle University, Taft, Manila (2019-12)