CISA

Insightful, results-driven Information/Cyber Security, Risk Audit, Compliance and Governance professional with more than 20 years global experience and notable success directing a broad range of corporate IT security initiatives while participating in planning, analysis, and implementation of solutions in support of business objectives for operation resilience. Good proven experience with investment banking processing systems that is focused towards performance and stakeholder satisfaction. 

I am experienced in ISO27001, COSO, COBIT, ITIL, FCA, UK DPA, PCI-DSS, NIST, ESMA, PSD2, MiFID 2 and GDPR; excellent in providing comprehensive access control design, system and application analysis, and full life cycle of project management. Hands-on experience leading all stages of system development efforts, including requirement definition, design architecture, testing and support. Outstanding project and program leader; able to co-ordinate and direct all phases of project-based efforts while managing, motivating and guiding team.

2 years Diploma in Computer Studies by National Computing Centre, UK

NCCUKI

•	Review all new high-risk projects; new technical designs, for Information risks and advise on suitable controls and mitigations at early stages of the program.
•	Lead the S&C team for specific technology and advice on the Information security for their projects.
•	Enhance technology risk reporting and dashboards; assisting in the identification of key metrics.
•	Offer advice to Shell and suppliers to assist in resolving questions and issues around how to manage risk.
•	Provide Subject Matter Expertise for projects and business stakeholders, in combination with the Improvement Program for UK Shell Energy Trading and Supply’s D&DM portfolio products. 
•	Work with the architecture community to review new technology and architecture innovations.
•	Assess and classify all potential business and infrastructure information risks.
•	Execute, with suppliers, risk analyses on IT application/services, develop and socialize our overall risk profile and action plans to mitigate risks and review and recommend approval project charters.
•	Facilitate smooth conduct of Risk Assessment (including Legal &amp; Regulatory) on Applications, Network & Systems.
•	Perform end to end Security Assessment on vendor offerings – New/Leveraging existing (SAAS / PAAS/IAAS) services including integration with Shell environment.
•	Translate Technical, legal and Regulatory Compliance obligations into a cohesive collection of Security Controls and provides the respective stakeholders with the IRM requirements and its implementation methodologies.
•	Support in development of tooling to support IRM processes and ensuring this is fit for purpose.
•	Actively participate in S&C team and community meetings, representing S&C and Business interests in other CC forums.
•	Support during Internal /External Audit, ensure that S&C continues to focus on risks significant to the Business, with emphasis on innovation.

Certified Information System Auditor with ISACA.

CISA-certification-31Jan2024.pdf

IRM Risk and Controls Management

Christy Tang

English

Native or bilingual proficiency

Chinese

Technology GRC Specialist

Change Management

Planning

Strategy

Communication

Negotiation

Leadership

NIST

Cyber security

Compliance

ISO 27001

Collaboration

Analysis

Problem-Solving

Technology

Governance

Financial

Process

Risk

Itgc

Change

Problem Solving

Time management

Ability to adapt to new challenges and overcome hurdles.

Ability to collaborate and communicate within a cross-functional team including managers, technical leads and system engineers Professional demeanor and positive attitude

Christy Tang

#1 Video-Talent Marketplace

Ready to discover your perfect career?