Collective backgrounds in CIO/COO and CISO leadership, enterprise security architecture, regional IT audit and advanced offensive security—with capabilities aligned to each engagement.
These backgrounds reflect previous executive, consulting and technical roles and support our specialist-led approach.
Previous CIO/COO-level responsibilities in banking, global consulting and complex enterprises, including technology risk, operations, resilience, cloud, transformation and senior management oversight.
Previous senior CISO and architecture experience across enterprise security, identity, cloud, Zero Trust, risk governance and public-sector technology environments.
Regional IT audit and operational-risk leadership, ITGC, regulatory control assessment, risk frameworks and evidence-based reporting across complex financial organisations.
Advanced VA/PT, application and API exploitation, red-team scenarios, cloud assessments and Web3/digital-asset platform security capabilities.
These summaries reflect professional backgrounds developed through earlier executive, consulting and technical appointments.
Eight experience snapshots distilled from professional leadership, consulting and technical backgrounds. Select a sector to explore work most relevant to your organisation.
Showing 4 of 8 selected specialist experience highlights
Technology programme leadership supporting the establishment and operational launch of a cross-border securities joint venture in Mainland China, integrating systems, cybersecurity, risk controls and regulatory-readiness coordination.
A regulated go-live requires evidence of control ownership, technology readiness and dependencies—not only a working system.
Senior technology and operations oversight of banking cloud and data migration, incorporating security, access, data protection, regulatory, operational and third-party control requirements.
Connect architecture and migration evidence to the management decision to proceed, accept risk or require corrective action.
Cybersecurity consulting experience in a Singapore government environment involving ICT risk assessment, security architecture, policy review, application security governance and secure development practices.
Demonstrate how the risks and controls of public-sector systems translate into implementable security architecture and assessment evidence.
Regional CISO and enterprise security architecture experience in a multinational industrial environment, including IT/OT security, cloud risk and governance assessments of enterprise AI and agentic workflows.
Link strategy, architecture, OT dependencies and emerging AI risks to decisions that business and security leaders can govern.
Senior internal audit and operational-risk experience across international financial institutions, spanning treasury and trade finance, equities trading, enterprise infrastructure, application controls and risk reporting.
Assess IT control effectiveness in the context of financial operations and management accountability.
Hands-on cybersecurity and technology governance experience in virtual-asset environments, covering VAPT, digital-asset custody-related controls, internal attack simulation and licensing-readiness activities.
Translate wallet, platform and signing-control weaknesses into technology risk priorities and evidence for management review.
Previous professional penetration-testing and red-team work alongside authorised security research across web applications, APIs, exposed enterprise assets and digital-asset technologies.
Provide evidence-led technical findings, clearly scoped attack-path validation and actionable remediation priorities.
Executive responsibility for business-critical technology services, regional delivery organisations, cybersecurity governance, managed-service operations, recovery arrangements and major technology change.
Evaluate risks across critical-service dependencies, remediation ownership, recovery readiness and major change decisions.
Selected professional experience from previous executive and consulting roles, specialist engagements and authorised security research.
Additional qualification and experience areas support resilience, technology change and independent programme assurance.
ITIL-aligned service operations, incident and change management, critical-service controls, operational resilience and service transition.
PRINCE2 and delivery-governance experience relevant to major programmes, migration assurance, project risk and go-live readiness.
SDLC and DevSecOps practices, release pipelines, change controls, vulnerability integration and secure software delivery.
ITIL, PRINCE2 and DevOps complement our cybersecurity and audit capabilities with technology operations, programme governance and secure delivery expertise.
Our associated specialists bring professional qualifications and experience in privacy, information protection, fraud-risk controls, architecture and adversary-informed cybersecurity methods.
CIPM and related privacy specialisations; CIPP-qualified and CIPM-qualified specialists contribute privacy-management and information protection perspectives.
CFE, CISA and risk-specialist expertise supports fraud-risk controls, investigations and technology audit.
Enterprise architecture (TOGAF), SABSA security architecture concepts, threat modelling and MITRE ATT&CK-aligned assessment scenarios.
Our specialists bring previous professional experience, authorised security research and recognised contributions to cybersecurity knowledge and methods.
Selected experience from associated specialists includes responsible vulnerability disclosure, adversary-informed assessments and contributions to recognised cybersecurity knowledge.
Participation in authorised vulnerability-disclosure or bug-bounty programmes involving space-sector, U.S. government and major enterprise technology environments, including research associated with public NASA and government disclosure programmes, alongside authorised Hong Kong telecommunications, university, startup and public-sector research programmes.
Authorised vulnerability research through public-sector and enterprise disclosure programmes, with responsible reporting of validated findings.
Associated specialist experience includes contributions to the MITRE ATT&CK knowledge base and practical threat-informed methods for attack simulation, detection coverage and security assessment.
Contribution experience is distinct from MITRE accreditation or endorsement.
Technical work and authorised research involving prominent global digital-asset exchange ecosystems, platform/API security, account and transaction controls, and residual-risk prioritisation.
Prior specialist work and independent research are differentiated from 8i-contracted engagements.
Tell us about your technology environment, security concerns or upcoming regulatory and programme priorities. We’ll help scope the right specialist assessment or advisory engagement.