About Me

I am a Business Information Security Officer (BISO) working in cybersecurity governance, risk, and compliance (GRC) for a large global financial group. My day-to-day sits at the intersection of regulatory expectation, operational risk, and technology change — translating frameworks such as ACSC Essential Eight, APRA CPS 234, and ISO 27001 into practical control programs that reduce risk without paralyzing the business.

My career path has been deliberate. I started as a business continuity intern, then moved into IT support, followed by first-line operational risk, before stepping into BISO / GRC. That progression means I understand the pressure on control owners, the language of regulators, and the reality of implementation in large, complex organizations. Speaking Mandarin and Cantonese also helps me engage with APAC and global stakeholders.

I am particularly interested in automation-led GRC: using Power BI, Power Automate, and VBA to reduce manual assurance effort, improve control visibility, and give executives faster, better evidence. I also contribute to AI risk governance, helping shape how a regulated bank evaluates and oversees AI use cases.

Outside of work, I represent my company at the Sydney Corporate Run and the Sydney Lunar New Year Dragon Boat Race, and I actively participate in Employee Resource Groups that support inclusion, wellbeing, and community engagement.