Information Security Analyst

IT Security and Cybersecurity Governance professional with 20 years of experience across diverse business sectors in Hong Kong, specialising in security compliance, infrastructure protection, cyber‑incident investigation, and regulatory alignment. Holds a BSc in Computing and Information Systems (University of London) and industry‑recognised certifications including MCSE, CCNA, and CISA.

Extensive experience managing PCI‑DSS certification projects, working closely with approved security vendors to meet VISA and MasterCard requirements. Skilled in coordinating internal and external audits, regulatory examinations, and third‑party risk assessments, ensuring organisations maintain strong security and compliance postures.

Hands‑on expertise investigating and analysing cyber‑attack incidents - including DDoS, phishing, malicious email activity, and IOC analysis - and implementing corrective actions to strengthen organisational resilience. Strong background in reviewing network‑security models, managing infrastructure security, and leading deployments of IPS/IDS and other security technologies.

Known for structured project delivery, clear communication with stakeholders, and the ability to translate complex security requirements into practical, business‑aligned solutions. Brings a mature blend of technical depth, governance experience, and risk‑management capability suited to security operations, compliance, and cyber‑risk roles.