NEIL DIVINAGRACIA

As the IT Cybersecurity and Infrastructure Manager, I lead the strategic design, implementation, and management of multi-layered cybersecurity frameworks and resilient IT infrastructures that safeguard Crown Regency’s digital and physical assets across all hotel branches in the entire Philippines, as well as affiliated businesses including Club Ultima, JKing, MetroSports, Overruns Outlet, and Princecourt. My approach integrates proactive cyber defense, real-time threat intelligence, and full compliance with RA 10173 (Data Privacy Act) and RA 10175 (Cybercrime Prevention Act) to mitigate risk and ensure regulatory alignment. I also oversee the seamless integration, availability, scalability, and security of mission-critical platforms—such as Hotelogix and IFCA—delivering operational excellence across the entire organization.

• Key Responsibilities & Strategic Focus:
• Advanced Cyber Defense Architecture:
• Design & Implement Sophisticated Security Layers: Spearhead the development and execution of a comprehensive defense-in-depth strategy, integrating next-generation firewalls, intrusion detection/prevention systems (IDPS), endpoint protection, network segmentation, and microsegmentation to safeguard every layer of the organization's IT infrastructure.
• Advanced Threat Detection: Leverage AI-powered security information and event management (SIEM) systems, machine learning-based behavioral analytics, and anomaly detection algorithms to proactively detect zero-day vulnerabilities and advanced persistent threats (APTs), ensuring real-time threat identification and mitigation before they impact critical systems.
• Real-Time Threat Monitoring & Analysis:
• Continuous Network Monitoring: Establish a 24/7 network monitoring framework utilizing AI/ML-driven analytics to continuously track and analyze network traffic, ensuring immediate identification of suspicious activity and anomalies, which can then trigger swift containment actions.
• Automated Incident Detection & Response: Implement automated incident detection workflows within SIEM tools to rapidly isolate compromised systems, contain attacks, and trigger predefined remediation steps, reducing response time and minimizing impact on operations.
• Threat Intelligence Integration: Integrate global threat intelligence feeds, cyber threat sharing networks, and industry-specific threat databases to gain real-time insights into emerging attack vectors, allowing the organization to stay ahead of global and local cyber threats.
• Incident Response & Forensic Analysis:
• Incident Response Leadership: Direct the company's cyber incident response (CIR) team, leading efforts through containment, eradication, and recovery stages. Continuously refine incident response playbooks based on lessons learned and evolving cyber threat tactics.
• Advanced Forensics & Root Cause Analysis: Post-incident, lead the deep forensic investigation to identify the attack's origin, analyze exploited vulnerabilities, and assess the organization's response to enhance future threat mitigation strategies. Utilize cutting-edge forensic tools to uncover hidden indicators of compromise (IoCs) and provide actionable intelligence for future defense mechanisms.
• Worked in team-driven environments and communicated effectively with stakeholders.

• Focal Head of Emergency Telecommunications Cluster, responsible for orchestrating the rapid deployment and seamless coordination of critical communication technologies during emergency and disaster response operations. As the primary liaison among government agencies, non-governmental organizations (NGOs), and telecommunications service providers, I ensure the swift, secure, and efficient mobilization of ICT resources, enabling effective and life-saving responses in crisis situations.
• Key Responsibilities & Achievements:
• Strategic Stakeholder Coordination
• Lead the collaboration efforts between national and local emergency response units, NGOs, and telecommunications providers, ensuring unified, efficient, and effective telecommunications support.
• Act as a central coordination point, aligning all technical communications with national disaster response strategies to maximize the impact and reach of response efforts.
• Rapid Telecommunications Needs Assessment
• Conduct comprehensive, on-the-ground assessments in disaster zones to evaluate the current status of communication infrastructure and identify immediate gaps.
• Formulate and execute rapid intervention strategies to restore communication links, enabling seamless coordination among responders and empowering timely decision-making.
• Deployment of Critical Communication Systems
• Spearhead the swift deployment of mission-critical systems, including VSAT/Starlink broadband, satellite phones, VHF/UHF/HF radios, wireless IP radios, aerial drones, and CCTV systems—guaranteeing continuous communications, situational awareness, and operational command during high-pressure, high-stakes scenarios.
• Training & Capacity Building
• Design, develop, and deliver targeted training programs and workshops to enhance technical capacity across government cluster teams, NGOs, and telecom providers, preparing stakeholders to efficiently manage and utilize communication resources during emergencies.
• Foster preparedness by focusing on emergency telecommunications, information management, and best practices for secure communications during disaster response.
• Technical Design & Systems Integration
• Deliver expert-level technical designs and comprehensive network schematics, facilitating the integration of wireless and radio communication systems for regional and provincial offices, ensuring high-availability connectivity during crises.
• Regulatory Compliance & Data Privacy
• Ensure all operations comply with the Data Privacy Act of 2012 (RA 10173), implementing strict protocols to protect sensitive data during emergency communication processes.
• Safeguard the rights of affected individuals by ensuring secure handling, transmission, and reporting of all information, in full alignment with privacy and data protection laws.
• 24/7 Emergency Operations Support
• Maintain round-the-clock readiness, providing unwavering support for regional disaster risk reduction and response missions.
• Actively contribute to the execution of tactical and contingency plans, ensuring continuous ICT operations during both routine and extreme emergency scenarios.
• Reporting & Documentation
• Provide timely and accurate daily situation reports, tracking progress, highlighting challenges, and offering technical updates to the NDRRMD Unit Head and the Office of Civil Defense (OCD), ensuring transparent and informed decision-making processes.
• Representation & Interagency Collaboration
• Represent the Emergency Telecommunications Cluster in technical meetings, inter-agency drills, and disaster preparedness seminars, championing best practices and playing an active role in shaping the region's disaster ICT strategies.
• Collaborate seamlessly with various stakeholders to ensure consistent communication strategies are in place across disaster management clusters.
• Leadership, Professionalism & Integrity
• Promote a culture of teamwork, accountability, and operational excellence, ensuring all objectives are met with professionalism, integrity, and compliance with NDRRMC mandates.
• Serve as a reliable leader in critical decision-making, maintaining a calm and proactive approach even in high-stress situations.
• Managing Critical Information Flow
• Oversee the management and dissemination of crucial information to responders and affected populations through secure and reliable communication channels. This ensures informed decision-making during emergency operations.
• Implement and enforce robust security measures to protect telecommunication infrastructure and data, especially in areas prone to disasters or conflicts.
• Staff Monitoring & Resource Optimization
• Monitor staff workloads and schedules, recommending timely actions to the NDRRMD Unit Head to address operational needs.
• Review and submit cost estimates and procurement requests for NDRRMD projects, ensuring efficient resource allocation for disaster response initiatives.
• Continuous Professional Development & Networking
• Maintain cutting-edge technical knowledge through participation in educational workshops, reviewing technology publications, and attending professional events to stay ahead of industry trends and emerging technologies.
• Cultivate a strong professional network and collaborate with peers and stakeholders to enhance disaster telecommunications preparedness.
• Collaboration with Technical Working Groups
• Work closely with the Technical Working Group in the region office, ensuring all efforts align with the Regional Disaster Risk Reduction Management (RDRRM) plans and foster strong teamwork across functional units.
• Compliance & Adherence to Policies
• Consistently comply with DICT policies, the code of conduct, and all relevant regulations, ensuring that operations adhere to both legal and organizational standards.
• Support the NDRRMD Unit Head and assist various NDRRM clusters as needed, ensuring coordinated efforts during both routine and emergency operations.

• As the Network Infrastructure and Communications Manager, I am responsible for the continuous management, administration, and optimization of the entire LBF network infrastructure and communication systems, overseeing operations in the Central Office and across over 600 nationwide branches. My role involves strategic planning, technical oversight, and team leadership to ensure seamless, secure, and efficient connectivity for the organization.
• Key Responsibilities & Strategic Leadership:
• Network Infrastructure & System Management:
• Comprehensive Network Administration: Provide continuous management and administration of LBF's entire network infrastructure and communication systems, ensuring optimal functionality across 600+ branches nationwide, with a central office hub. Oversee all aspects of network performance, availability, and security, ensuring 24/7 operational continuity.
• Seamless Integration of ICT Projects: Spearhead the design, configuration, and deployment of network upgrades and enhancements to support new ICT projects and evolving services in the Central Office and offsite stations, ensuring alignment with business goals and future scalability.
• Network Optimization & Performance:
• Operational Excellence: Lead critical high-level tasks related to the day-to-day operations of network systems across both central office and offsite stations, ensuring maximum uptime and network reliability. Identify and troubleshoot any performance bottlenecks to maintain uninterrupted service across all branches.
• End-to-End Network Monitoring: Implement proactive network diagnostic monitoring and cybersecurity protocols across the entire infrastructure, including data centers and remote locations, to ensure system integrity and rapid detection of anomalies and potential threats.
• Advanced Network Infrastructure Design & Management:
• Hardware & Software Integration: Design and deploy cutting-edge network components such as physical and virtual servers, VPNs, Gateways, load balancers, core stack switches, and Unifi wireless systems to meet the growing demands of LBF's operations.
• High Availability & Redundancy: Ensure high availability (HA) across network services and systems through strategic load balancing, redundancy design, and failover configurations, guaranteeing zero downtime for critical communications systems and data access.
• Strategic Network Planning & Capacity Management:
• Long-Term Infrastructure Strategy: Develop and execute long-term strategic plans to ensure network capacity meets both current and future needs. Anticipate business requirements and technology trends, and scale the network infrastructure accordingly.
• IT Asset Management & Documentation: Lead the implementation of IT asset management best practices, maintaining inventory and documentation of all network components to facilitate efficient lifecycle management and support audits.
• Cybersecurity & Risk Management:
• Comprehensive Cybersecurity Oversight: Take proactive measures to safeguard the entire network infrastructure from cyber threats, applying stringent security protocols on servers, network devices, and data transmission. Regularly perform penetration testing and vulnerability assessments to ensure network resilience.
• Traffic & Bandwidth Monitoring: Oversee and enforce strict monitoring of network bandwidth and traffic to identify irregularities or potential threats. Resolve performance issues in real-time, ensuring the integrity, security, and optimal performance of all communication systems.
• ICT Project Management & Deployment:
• End-to-End Project Oversight: Administer the full spectrum of ICT project management activities from planning and deployment to post-implementation support, ensuring seamless integration of new technologies across the central office, offsite stations, and branch network.
• Vendor & Partner Coordination: Collaborate closely with external ICT vendors and partners to ensure that all technology solutions align with LBF's security policies, operational needs, and business objectives. Address and resolve any technical concerns promptly.
• Leadership & Team Development:
• Leadership & Decision-Making: Provide strong leadership and strategic decision-making, fostering a collaborative environment within the department. Lead by example, ensuring that goals are met through clear direction, effective communication, and accountability.
• Mentorship & Coaching: Drive the growth of junior team members through consistent mentorship and coaching. Promote skills development through structured training programs, ensuring the team stays current with industry trends and technological advancements.
• Managed vendor relationships for hardware, software, and services procurement, ensuring quality products at competitive prices.

• Lead the coordination and management of Emergency Telecommunications Operations, ensuring the seamless execution of Disaster Risk Reduction and Management (DRRM) initiatives. Play a pivotal role in supporting RGECS/DRRMD Division activities, aligning technical and operational plans to regional and national disaster response strategies. Ensure continuous readiness for 24/7 operations during emergencies, calamities, and disasters, providing expert technical support to NDRRM tactical and contingency plans and ensuring efficient disaster communication and support operations.
• Technical Planning & Implementation:
• Design and implement integrated emergency communication systems, including radio communication and wireless IP radios, ensuring regional connectivity and real-time communication flow. Create schematic diagrams and plans for the Region and provincial offices to ensure interoperability during emergencies, supporting NDRRMD in maintaining a resilient, scalable network.
• Situation Reporting & Compliance:
• Submit daily situation reports as per NDRRMD and OCD requirements, ensuring accuracy, compliance with RA 10173 (Data Privacy Act), and protection of sensitive data during disaster management. Provide actionable data to inform decision-making and ensure situational awareness.
• Stakeholder Coordination & Collaboration:
• Coordinate with government emergency clusters, NGOs, telecom providers, and stakeholders to integrate telecommunications efforts into disaster response strategies. Participate in NDRRMD technical meetings, trainings, and seminars to stay updated on best practices and new technologies.
• Operational Support & Resource Management:
• Monitor and maintain NDRRMD tools and equipment for rapid deployment. Manage asset inventories, oversee staff workload, and provide recommendations on staffing and scheduling to ensure efficient disaster response operations.
• Budgeting, Procurement & Resource Management:
• Oversee procurement of essential tools and equipment for NDRRMD projects, ensuring cost-efficiency while meeting operational needs. Contribute to budget planning for emergency telecommunications systems.
• Professional Development & Technical Knowledge:
• Stay updated on industry advancements by attending workshops, reading publications, and networking with experts. Lead or contribute to training programs for government clusters and partners, enhancing their telecommunications capabilities.
• Technical Support & System Optimization:
• Coordinate with DICT engineers to troubleshoot network issues and optimize emergency communication systems. Ensure rapid deployment of resources while maintaining system integrity and security.
• Cross-Functional Team Leadership & Professionalism:
• Promote teamwork and professionalism across internal and external teams, ensuring alignment with NDRRMC mandates. Uphold high ethical standards, ensuring compliance with DICT policies, codes of conduct, and regulations.
• General Support & Continuous Improvement:
• Support the NDRRMD Unit Head and Cluster Teams in continuous improvement efforts, ensuring resilient communication systems during emergencies and facilitating critical life-saving decisions.
• Achieved successful project outcomes by maintaining accurate documentation and meeting strict deadlines.

• Network Infrastructure Design & Management:
• Lead the design, installation, and management of critical IT infrastructure, including core network data centers, switches, routers, firewalls, and both physical/virtual servers. Ensure scalability, performance, and seamless integration of all network components to meet business needs.
• Cybersecurity Integration & Risk Management:
• Implement and monitor advanced cybersecurity measures (firewalls, IPS, endpoint security) across the network infrastructure, conducting vulnerability assessments and penetration testing. Ensure compliance with industry standards and regulations.
• Strategic Planning & Network Optimization:
• Develop long-term infrastructure strategies, ensuring network scalability and system redundancy. Design and optimize network cabling systems (fiber optics, copper) for high-speed, secure, and efficient data transfer.
• Network Monitoring & Maintenance:
• Oversee daily monitoring of servers, core switches, VPN routers, firewalls, and other critical infrastructure components. Implement proactive security measures, conduct regular health checks, and maintain continuous system stability and performance.
• Disaster Recovery & Business Continuity:
• Manage disaster recovery planning and protocols, ensuring resilient infrastructure capable of rapid recovery from disruptions or cybersecurity incidents. Regularly test backup systems, failover mechanisms, and recovery plans to minimize downtime.
• Server & System Configuration:
• Configure and maintain essential server services (Active Directory, DNS, DHCP) and ensure secure database backups. Apply regular security patches to safeguard network systems.
• Team Leadership & Collaboration:
• Lead and mentor the IT team, ensuring effective coordination and up-to-date technical skills in network management and cybersecurity. Collaborate across departments to ensure infrastructure aligns with business goals and requirements.
• Vendor & Contract Management:
• Negotiate with vendors and external contractors to secure products and services that meet cybersecurity and operational standards. Oversee IT asset management, maintain detailed documentation of configurations, and ensure efficient system troubleshooting.
• Project & Resource Management:
• Manage IT infrastructure projects, ensuring timely delivery and adherence to budget constraints. Allocate resources effectively and track expenditures to ensure cost-efficient project implementation.
• Compliance & Governance:
• Ensure all IT operations and network activities comply with relevant laws, regulations, and internal policies. Lead incident response efforts and root cause analysis following security breaches, strengthening the organization's defenses.
• Cross-Departmental Coordination & Documentation:
• Collaborate with business units, operations, and security teams to ensure IT infrastructure supports organizational needs. Maintain comprehensive documentation for network configurations, security policies, disaster recovery procedures, and system updates.
• Resolved issues and escalated problems with knowledgeable support and quality service.