Information Security Manager - GRC Specialist

Cybersecurity and GRC leader with 20+ years’ global experience delivering security strategy, governance, risk management, and compliance across banking, trading, and IT consulting environments. Proven track record leading enterprise security programmes, incident response, and regulatory alignment for organisations including Bank of East Asia, Nova Credit, and Li & Fung.

Expert in ISO 27001, NIST, GDPR, SWIFT CSCF, PCI‑DSS, and HKMA iCAST frameworks, with extensive experience driving audit readiness, cross‑border compliance, and enterprise‑wide security uplift. Delivered BCP/DR drills, vulnerability management, and security awareness programmes across 20+ countries, ensuring operational resilience and regulatory adherence.

Architects robust security solutions including firewalls, VPNs, SIEM, DLP, EDR, and PKI, combining deep technical knowledge with strategic leadership and stakeholder advocacy. Holds an MSc in Enterprise Engineering Management and a BEng in Computer Engineering (HKUST), supported by certifications including CISSP, CISM, CISA, ISO 27001 Lead Auditor, AWS Cloud Practitioner, CCNA, and CCSE.

Fluent in English and Cantonese, with strong experience navigating cross‑border regulatory environments and complex audit landscapes.