BRYAN KOK

• Conduct internal ISO 27001 & ISO 27002 Implementation
• Conduct PCI DSS implementation
• Provide advisory and consultation on both ISMS and PCI DSS implementation and audit procedures
• Present the idea, road map, timeline, and etc on the compliance implementation
• Communicate between internal team and client to ensure target goal is achievable

• Conduct various information security audits and implementation for various standards (internal audit and external audit) which listed below:

- PCI DSS

- ISO 27001:2013 & 2022

- ISO 9001:2015

- RMiT (for data center risk resilience and risk assessment)

• Provide consultation to customer on enhancing and strengthen their information security based on industry standards and their security objectives.
• Conduct security awareness training for internal employees.
• Provide guidance and advisory to junior auditors on their daily tasks.

• Conduct various security assessments which listed below:

- Web application penetration testing

- Mobile application penetration testing

- Web service penetration testing

- Vulnerability assessment and penetration testing

- Network segmentation penetration testing

- Wireless security assessment

- PCI ASV scanning

- Host and database configuration security assessment

• Provide consultation to customer on remediating the vulnerabilities identified during the assessments.
• Provide guidance and advisory to junior colleague on their daily tasks.