Lead the Siemens China cybersecurity ecosystem:Drive IT, OT, Product security and Security offering in China.Lead the China Cybersecurity law program, define/implement local cybersecurity strategy and initiatives as well as global policy, controls and process. Assesses and mitigates cybersecurity risks, and monitor compliance to cybersecurity controls.Co-create with customer for OT security solutions like (OSA), and promote security business via Cybersecurity consulting and provision of external services.Interact proactively with local security authorities/institutes, standardization bodies, partners and communities.Siemens China is the 1st industrial MNC who obtained security service license (2006), National Grade protection Level 3 (2017), security certification of PLC family (2018). And awarded as Premium Industrial security service provider, Outstanding Contributor in Vulnerability / Incident Handling, etc.

Lead the security R&D team in Beijing and Suzhou, established Siemens China Cyber Defense Center (CDC) to build up the 1st security operating center for OT, which hold the national grade protection lv 3, ISO27001 certificates. CDC will safeguard Siemens products, solutions, factories and plants, and provide value-added security service to both internal and external customers.Also lead the Siemens China Cyber Security law program to analyze and manage the business risk, and identify the right strategy and approach for Siemens digital business in China.

Lead security management consulting projects for security blueprint, 3-5 years planning/roadmap and holistic risk mgmt. Start from business/market analysis and define the security goal, perform security assessment based on international standards e.g. ISO 27001/NIST, local standards like MPLS and best practices. Identify the security gap and design holistic security architecture incl. organization, process, technology, etc. for customer. And define a 3~5 years roadmap and implement. Delivered strategic consulting project for key customers like China Mobile, China Unicom, ChemChina, SINOPEC, etc.

As PM, Lead for various security R&D project incl. application security, 3G security, Wireless security, etc. Based on security-as-service concept, Co-created the Security Baseline Checker and Application Security Evaluation Center (APPSEC) which widely used in key customers like China Mobile, etc.

Start as a pen-tester for web and IT, and later focused on Telecom security for 3G application and infrastructures.Crack/Anti-Crack research for industrial firmware as well as PLC program