Michael Zhong Email & Phone Number

Vancouver, Bc, Ca

Vancouver, Bc, Ca

Sunnyvale, Ca, Us

● Lead the Security Operations Center● Define and enforce security baselines● Vulnerability management● Compliance management● Explore new security solution and cooperate with product teams

Sunnyvale, Ca, Us

● Cyber security incident response● Network security enhancement● Compliance management

Sunnyvale, Ca, Us

● Cyber security incident response● Firewall management● Server security management● Endpoint security management● Vulnerability management● ISO 27001 implementation● SOC 2 implementation

Richmond, Bc, Ca

● Perform detailed risk assessments and audits or reviews, which include, developing project plans and work programs, evaluating risks and controls, providing recommendation or advice, and communicating engagement results to clients● Supervise and mentor staff and manage client relations when designated as AIC of engagements● Work in a systematic and disciplined approach in accordance with department and Institute of Internal Auditors (IIA) standards, particularly, working paper and report writing standards● Recommend, create, and implement process improvements within the Internal Audit department

Sunnyvale, Ca, Us

• Information security administration including security risk and gap analysis.• Develop, document and implement information security procedures to enforce compliance with information security standards and policies, conduct ISO27001 certification project.• Protects information assets by defining access privileges, control structures, and resources.• Monitor the internal control systems to ensure that appropriate security is maintained.• Analyze, review information on cyber threats and internal information security activities. • Vulnerability management and compliance check for security configuration baseline.• Participate in the information security incident response lifecycle.• Determine security violations and inefficiencies by conducting periodic audits and coordinate with the external auditors for ISMS certification.• Support to design and develop Business Continuity Plan for major information systems and networks.• Train fellow employees in security awareness and procedures.

Establishing Information Security Management System for the companyDefine information security policies, standards and guidelinesDoing IT audit and following up the improvement measuresIT security risk assessmentIT security project managementThe relevant work of Information classified Security ProtectionResponsible for liaison with World Airports IT Standing Committee

• Build and maintain Information Security Management System and maintain the certification of ISO 27001; • Conduct reviews to evaluate quality assurance activities, and information systems;• Do internal audit of the Security and Quality Management System; • Conducted systems vulnerability and threat assessment and provide solutions and systems administration of supported servers; • Administrate the Anti-Virus system and deal with all the virus issues;• Eliminated existing threats on client receiving recognition;• Responsible for defining and IT recovery and business continue plan for systems and networks.

• Managed Network and Systems Operation Monitoring Project, built the IT operation monitoring system. • Conducted reviews to assess ISO 9000 quality management system and maintenance. • Conferred with clients to identify and document requirements.• Identified and recorded client’s requirements.• Conducted business and technical research.• Designed, developed, and implemented information systems solutions.• Configured and monitored CA NSM system and network monitoring system.

Master'S Degree, Computer Technology

Bachelor'S Degree, Electronic Engineering