Information Security Manager - GRC Specialist

Cybersecurity and GRC leader with 20+ years’ global experience across banking, trading and IT consulting environments

Proven track record delivering security strategy, governance, risk management and regulatory compliance for major organisations including Bank of East Asia, Nova Credit and Li & Fung

Extensive expertise in ISO 27001, NIST, GDPR, SWIFT CSCF, PCI‑DSS and HKMA iCAST frameworks

Experienced driving audit readiness, cross‑border compliance and enterprise‑wide security uplift across 20+ countries

Led major incident response, vulnerability management, BCP/DR drills and security awareness programmes ensuring operational resilience

Architects robust security solutions including firewalls, VPNs, SIEM, DLP, EDR and PKI, combining technical depth with strategic leadership

Holds an MSc in Enterprise Engineering Management and BEng in Computer Engineering (HKUST)

Certified in CISSP, CISM, CISA, ISO 27001 Lead Auditor, AWS Cloud Practitioner, CCNA and CCSE

Fluent in English and Cantonese, with strong capability navigating complex regulatory environments and multi‑jurisdiction audit landscapes

Recognised for stakeholder advocacy, structured risk‑based decision‑making and delivering secure, compliant and scalable enterprise security programmes.