• Evangelist for a security product and security lines of services in a services company in the areas of application security testing, OWASP Vulnerabilities, App. security assessment • Expertise in IT Penetration Security / ISO Compliance Audit,BCP/DR Audit,Computer Forensics ,App. Security Assessment,Internal Audit ,Vulnerability,Security Operations Management, Enterprise Security Review Continuity,3rd Party Audit. • Leading the cyber security and risk/compliance conversations with financial institution customers operating in highly regulated environments across APAC. Working with CISOs to define and execute a cloud security strategy to migrate sensitive and critical workloads to AWS/Azure/EKS/AKS • Evangelist for cloud security across the APAC region, performing public speaking at industry events, forums and round tables. Topics include data protection, incident response, identity, logging & monitoring, infrastructure & application security, automating compliance. In 2018 I was a speaker at AWS -RE-Invent Singapore, ISACA and other industry conferences. • Proponent of automated compliance & security by design. Former red-teamer, penetration tester • Regulations: MAS Outsourcing, MAS TRM, HKMA, RBI Cyber Security, BSP808, APRA, BoT, BNM, etc. ISO27001, ISO27017, ISO27018, NIST Cyber Security Framework, PCI-DSS, CIS Top 20 and CSA CCM. Certifications & Accreditations Cyber Security Auditor - COBIT Governance Certified Cloud Security Auditor (CSA - Star) Certified Member of Aus Information Security Association (AISA), ISACA & Cloud Security Alliance (CSA) & OWASP Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) Certificate of Cloud Security Knowledge or CCSK Certified Cloud Security Specialist (CCSS) CISM: Certified Information Security Manager. SANS GIAC Security Essentials – GSEC. (WIP) Offensive Security Certified Professional – OSCP (WIP) EC-Council Certified Ethical Hacker V11 EC-Council Certified Security Analyst/Penetration Tester VMware Certified Professional (VTSP) PRINCE2 Foundation Certified ITIL V3 Foundation / Service Strategy / Service Transition / Service Operation/ Service Design/ Managing Across Life-cycle (MAL) Certified ISMS ISO 27001:2013 Lead Auditor – IRCA Member of Singapore FinTech Association (SFA)