Alex Yao Alex Yao

Frameworks, tools, and credentials

I work across governance, risk, and technical operations. CISSP is planned; no other certifications are currently held or scheduled.

Frameworks, tools, and credentials

Frameworks & Regulations

  • ACSC Essential Eight Applied in production
  • APRA CPS 234 Applied in production
  • ISO 27001 Working knowledge
  • ASIC / AISI Working knowledge

GRC & Security Domains

  • Cybersecurity governance Working knowledge
  • Operational risk management Applied in production
  • Business continuity management Working knowledge
  • Third-party risk management Working knowledge
  • AI risk governance Working knowledge

Data & Automation

  • Power BI Applied in production
  • Power Automate Applied in production
  • VBA Applied in production
  • SQL Working knowledge
  • Python Working knowledge

Core Competencies

  • Stakeholder engagement Working knowledge
  • Executive reporting Working knowledge
  • Control assurance Working knowledge
  • Risk assessment Working knowledge
  • Cross-functional collaboration Working knowledge

Certifications

  • Certified Information Systems Security Professional (CISSP)

    (ISC)²

    Planned for the next 12–18 months.

    Planned