Wesley Cheung Email & Phone Number

Sunnyvale, Ca, Us

• Perform internal audits against SOX IT controls such as change management and access security for the contract manufacturing department to help build upon current processes while maintaining compliance• Conduct internal audits on Open Market purchases to ensure all purchases, especially high-risk components, are tested and tracked prior to deployment• Review 40-50 change tickets on a weekly cadence to ensure compliance and reach out to process owners if tickets are not compliant to change management policy• Collaborated with different application teams to document and enhance current processes such as assisting in documenting code review and redefining scope

Santa Clara, California, Us

• Key member in multiple external compliance audits such as HITRUST and SOC 2 which included compiling and verifying evidence of more than 250 HITRUST controls and 50 SOC 2 controls to address auditor requests• Implemented change tracking of completed audits to better inform planning and execution of future audits• Analyzed security findings generated from AWS Security Hub to inform the relevant subject matter expert and prioritize remediation based on security severity• Documented policies and standards to create baseline security controls for subject matter experts to follow and enforce through their standardized procedures• Led a security awareness training program focusing on completion of annual compliance training for more than 1000 existing and new hire employees by designing the Learning Management System (LMS) training course and resolving difficulties encountered during the course

Irvine, California, Us

• Drafted risk assessment reports to document maturity of client internal security systems and provide recommendations to mitigate potential security risks • Formulated more than 10 compliance reports including Report on Compliance for clients requiring Level 1 PCI-DSS compliance, and SOC 2 reports based on the Trust Service Criteria • Performed security assessments to evaluate strength of client’s IT processes including access control, change management, vulnerability management, logging and monitoring, and human resources• Assembled security implementation evidence from clients such as policy and procedures, security configurations, and deficiencies to present to client stakeholders

Irvine, California, Us

• Designed policies and procedures for internal use focusing on disaster recovery and information security• Researched various security standards including ISO 27001, PCI-DSS, NIST CSF, and SOC 2• Supported lead security assessors on client’s IT environment for best security practices• Mapped SOC 2, ISO 27001, and PCI-DSS controls to identify control overlaps

Minneapolis, Mn, Us

• Deliver exceptional customer experience by resolving customer concerns• Support other work centers by performing sales floor duties• Oversee 8-10 people per daily shift as a stand-in manager when needed; responsibilities included task delegation, schedule management, and executive decision-making• Recognize fraudulent patterns and habits based on consumer purchases

Newport Beach, California, Us

• Assisted customers through various duties; duties included taking orders, preparing meals, packaging food items, and ringing up customer orders.• Performed multiple food safety measures to ensure clean and fresh ingredients for customers; food safety measures included frequent inspection of food temperature and freshness, and management of clean work environment.• Communicated with other crew members whenever food ingredients are low to always have all food options available to serve for customers.