Michael Li Email & Phone Number

Working in the IT Governance Department of the Information Management Center, which employes over 100 IT engineers.• Developed and continuously improved the information security management system, encompassing policies, standards, procedures, and processes in line with ISO 27001:2013 standards and industry best practices, specifically tailored for the vehicle production, research, and development sectors.• As a Project Manager, led the Information System Risk Assessment Program, focusing 80% on information security risk and 20% on IT project management risk. Specialized in information systems supporting automobile manufacturing, research, and development, including MES, PDM, PLM, BOM, and TPMS application systems, as well as networks, databases, operating systems, and operational processes. Additionally, evaluated the effectiveness of security products in protecting the automotive production and R&D environment, ensuring a balance between security effectiveness and the impact on business operations.• Design information security technical framework: Application Security, Network Security, System Security, Virtualization Security, and Data Security.• Conduct regular penetration testing with a focus on black box techniques, following the Penetration Testing Execution Standard (PTES) framework alongside Open Web Application Security Project (OWASP) methodologies. • Contribute to the development and implementation of IT project Management systems in alignment with Project Management Professional (PMP) standards, support the day-to-day operations of the Project Management Office, and assist in project risk management to ensure programs and projects align with organizational goals and requirements. Manage IT government roles, including IT budgeting, IT annual performance management, and assisted the General Manager of the Information Management Center.

--Responsibility:• Establish IT audit standards, guidelines, processes, and plans. Lead the IT audit department in reviewing and testing the Information Management Center's internal control environment, identifying and remediating control framework gaps, and improving IT compliance by 35%.• Participate in the entire IT procurement project lifecycle, including project application, purchasing requisition, qualification examination and verification, technical review, site inspection, final evaluation, bid opening, designated meetings, and post-evaluation.

--Responsibility: • Create engaging lesson plans, define curriculum, and develop choreographies for Hiphop, Body Jame, and Zumba dances.• Deliver advanced instruction to classes of up to 20+ students, evaluate dance posture and sensation, and provide constructive feedback and positive reinforcement according to individual needs.

--Responsibility： • Conduct security risk assessment for daily IT operations regarding video game design and development industry best practices, legal requirements, and ISO 27001:2013 standard.

--Responsibility： • As an external auditor, perform accurate assessments to ensure data security in payment processing environment, such as cardholder data and sensitive authentication data (CAV2/CVV2/CVC2) according to various audited party business and enterprise models, including merchants, processors, acquirers, issuers, and service providers, and provide guidance for remediation until fully compliance with PCI DSS requirement is achieved.• Draft clear and meaningful findings, assessment reports, work papers, presentations, and other materials for presentation to senior management.• Provide expertise in various areas, including but not limited to secure enterprise architecture, security devices and applications configuration, OS and applications secure hardening, network secure architecture and database security, and information security policies, procedures, and process.• Manage audit relationships at all levels, from auditing firm staff to partner, to ensure strong and clear alignment.

--Responsibility：• Investigate potential issues in clients' critical business infrastructure and perform comprehensive analyses within the Cyber Defense Center (CDC). Tasks include analyzing event logs, conducting risk assessments, performing log analysis, monitoring file integrity, executing malware analysis, managing vulnerabilities, and preparing detailed reports for clients.• Utilizing the SIEM Platform Splunk for comprehensive monitoring and incident response, conducted dynamic and static analysis of suspicious malicious files in a VM sandbox to assess potential infections on customer hosts.--Strengths through this position:• Familiar with Splunk and experienced in monitoring, analyzing, and responding to security incidents effectively, as well as using static and dynamic analysis tools for malware files, including BinText, Regshot, CaptureBAT, Process Hacker, Process Monitor, Procdot, Wireshark, IDA, and similar softwares.