LOUIS ZHANG · ZHICHAO章智超 · LOUIS ZHANG
Louis Zhang (Zhichao)章智超 Louis Zhang
Leading technology controls & governance, AIA Australia主导友邦保险澳洲科技控制与治理Shanghai Jiao Tong University · ex-KPMG上海交通大学 · 前毕马威

Move fast with AI.
Without betting the business. 全速拥抱 AI，
不以业务为赌注

For 13+ years I've turned technology, cyber and AI risk into decisions for boards, executives and investors, across Australia and Asia-Pacific. 逾 13 年深耕澳洲及亚太，为董事会、管理层与投资方将科技、信息安全和 AI 风险转化为清晰可行的决策。

Where I add value价值所在 How I think我的思路
Louis Zhang
Career履历AIA Australia友邦保险澳洲KPMG Australia毕马威澳洲KPMG China毕马威中国CICC, M&A中金公司 · 并购
Sectors行业Banking & insurance银行与保险Asset management & securities资产管理与证券Telecoms, retail & e-commerce电信、零售与电商Technology & mining科技与矿业
Credentials资质CISA · CCSPISO 27001 / 42001 · NIST CSFAPRA CPS 234 / 230
Based in城市与语言Melbourne & Shanghai墨尔本与上海English · Mandarin英语 · 普通话Shanghainese上海话
IWhat I solve我能解决的问题
01Where I add value价值所在

The questions to settle before you sign, deploy or scale.签约、上线、扩张之前，先厘清这些问题

The aim: decisions you can defend, deals with no hidden surprises, and AI that ships safely.目标是：经得起推敲的决策、没有暗雷的交易，以及可放心上线的 AI。

SIGN签约DEPLOY上线SCALE扩张
I check each gate before you go through it.每一道关口，我先为您审视。
IT & cyber due diligenceIT 与信息安全尽调

Know what you’re buying before you sign.签约之前，看清您买的是什么

I assess the target’s technology, cyber posture and AI exposure, then turn the findings into deal terms and a 100-day plan.评估目标公司的科技能力、信息安全状况与 AI 风险敞口，并将发现落实到交易条款及交割后百日整改计划。

Board & executive advisory董事会与高管顾问

Boards that decide, not just get briefed.让董事会作出决策，而非仅听取汇报

Risk appetite, APRA CPS 234 and 230 priorities and incident readiness, framed as trade-offs and options, with an Asia-Pacific lens.将风险偏好、APRA CPS 234/230 监管重点及事件应对准备，转化为可供选择的方案与取舍，立足亚太视野。

Adopting AI safelyAI 安全落地

Ship AI faster, without the surprises.AI 上线更快，风险可控

Governance, guardrails and assurance for GenAI, RAG, MCP and agents, sized to how fast you want to move.为 GenAI、RAG、MCP 及智能体建立治理框架、执行控制与保障机制，与业务推进的速度相匹配。

Third-party & AI supply chain第三方与 AI 供应链

Vendor reviews in days, not months.供应商评估，数月缩至数天

An operating model that scales. I’ve built one covering 100+ vendors.一套可规模化的运营模式，我曾搭建覆盖百余家供应商的落地管理体系。

Innovation scouting & POC / POV创新前沿与 POC / POV

Pick the right tool, proven in practice.选型之前，先经实战验证

A shortlist tested in real conditions, drawing on a wide network across the cyber community and vendors.依托信息安全业界与厂商的广泛人脉，提供经真实环境验证的候选清单。

Building security tools with AI以 AI 打造安全工具

Risk know-how, turned into working software.将风险经验转化为可用的产品

For founders who want an AI security brain on the team, and cross-border companies setting up in Australia.面向希望为团队配备 AI“安全大脑”的创业者，以及落地澳洲的跨境企业。

Talks, writing and mentoring演讲、写作与人才培养

Teams that understand AI risk.让团队真正读懂 AI 风险

Panels, podcasts and articles, and helping professionals, students and job seekers move into cyber, GRC or AI governance.论坛、播客与文章；并帮助有志进入信息安全、GRC 或 AI 治理领域的从业者、学生与求职者。

More detail展开详情
  • IT & cyber due diligenceIT 与信息安全尽职调查

    Done before: IT due diligence on a leading Chinese cloud computing company and pre-IPO SOX readiness for an investment bank and a fintech unicorn.代表项目：为一家中国头部云计算公司开展 IT 尽职调查；为一家投行及一家金融科技独角兽提供上市前 SOX 准备。

  • Innovation scouting & POC / POV创新前沿与 POC / POV

    I run proofs of concept and proofs of value, so buyers get a shortlist tested in practice and vendors get an honest buyer's view.主导概念验证（POC）与价值验证（POV）：为买方提供经实战检验的候选清单，也为厂商提供真实的甲方视角。

  • Building security tools with AI以 AI 打造安全工具

    Always happy to compare notes with founders building in this space.也乐于与这一领域的创业者交流心得。

IIHow I think我的思路
02How I think思考框架

Turn uncertain technology risk into decisions people can make.将模糊的科技风险，转化为清晰的决策

Turning risk into decisions is the one job behind everything I do. Boards decide how much risk to carry. Investors decide whether to sign. Founders decide what to build. Six principles guide how I help them.我所做的一切，归根结底是一件事：将风险转化为决策。董事会决定承担多少风险，投资方决定是否签约，创业者决定做什么。以下六项原则，是我的工作准则。

INHERENT固有风险 RESIDUAL剩余风险 IMPACT →影响 → LIKELIHOOD →可能性 →
My job in one picture: take a risk from the red corner to a place the business can live with, and keep moving. 一图概括我的工作：将风险从红色区域移至业务可接受的范围，并持续推进。
01

First principles, then frameworks第一性原理优先，框架其次

Start from the asset, the threat and the cost of failure.从信息资产、安全威胁与防护失效的代价出发。

02

Risk is a business decision风险即商业决策

Boards need trade-offs and options, not CVE counts or WAF block volumes.董事会需要的是取舍与方案，而非单纯的漏洞修复或安全拦截数量。

03

Good security says “yes, safely”好的安全，不是一味说“不”

Controls that only say no get worked around. Controls that help the business move safely get adopted.只会拦截的安全控制，终会被业务绕开；帮助业务安全前行的控制措施，才能真正落地。

04

Automate repeated judgment重复的判断，交给机器

Repeated patterns of execution and judgement should become reusable AI workflows.重复的执行与判断模式，应沉淀为可复用的 AI 流程。

05

Bridge worlds; let trust filter the noise连接不同世界，以信任过滤噪音

The best insight comes from working across regions, cultures and organisations, and from reading between the lines of what engineers and operators do and what boards decide.最有价值的洞察，往往产生于跨区域、跨文化、跨组织之间，藏在一线工程师、执行者与董事会决议的字里行间。

06

Judgment and taste are the moat判断力与品味，才是护城河

AI is driving implementation cost toward zero.AI 正在让执行成本趋零。

More detail展开详情
  • First principles, then frameworks第一性原理优先，框架其次

    Frameworks check the answer; they don't replace the thinking.框架用于校验答案，而非替代思考。

  • Risk is a business decision风险即商业决策

    I translate technical and cyber risk into choices leaders can make.我将科技与信息安全风险，转化为管理层可决策的选项。

  • Good security says “yes, safely”好的安全，不是一味说“不”

    Controls that enable get adopted. Turn approved patterns into paved roads, so secure AI deployment is practical and repeatable.将验证过的模式沉淀为标准路径，使“安全 AI 部署”可落地、可复用。

  • Automate repeated judgment重复的判断，交给机器

    I built an AI security advisory agent that cut vendor reviews from months to days.我打造了 AI 安全咨询助手，将供应商评估从数月缩短至数天。

  • Bridge worlds; let trust filter the noise连接不同世界，以信任过滤噪音

    As AI scales, relationships, accountability and trust still decide outcomes and separate signal from noise.AI 越普及，人际关系、责任担当与信任越关键，也越能帮助我们从噪音中识别信号。

  • Judgment and taste are the moat判断力与品味，才是护城河

    Value is moving up the chain: knowing what to build, which risks matter, and how to define good.价值链条正在上移：知道该做什么、哪些风险真正重要、如何定义“好”。

  • How I work我的工作方式
  • Unlearn the learnt归零心态，持续学习

    Embrace the new paradigm, assume nothing, and treat everything as possible.拥抱新范式，不设限，一切皆有可能。

    Finance to audit to cyber to AI, each move made on purpose.从金融到审计，再到信息安全与 AI，每一步都是主动选择。

  • Trusted partner值得信赖的伙伴

    Aligning Line 1, Line 2, audit, legal, procurement and 30+ stakeholders across APAC.协同一道、二道防线、审计、法务与采购部门，以及亚太各地 30 余位干系人。

  • Coach教练

    Building teams and growing junior people, onshore and offshore.带领团队、培养新人，涵盖在岸与离岸团队。

  • Data-driven数据驱动

    Redesigned KRIs and reporting so risk committees focus on the decisions that matter.重新设计 KRI 与汇报体系，让风险委员会聚焦真正重要的决策。

Started, not assigned主动发起，而非被动安排

High agency is the ticket to the new world. When AI makes doing cheap, what matters is knowing what to do, and having the courage to do it.主动性，是新世界的船票。当 AI 让“做”变得廉价，真正重要的，是知道做什么，并且勇于实践。

See five examples展开五个案例
  • AIAI

    Built an AI-powered Security Advisory Agent on a digitalisation roadmap I wrote myself, before anyone asked for one.在自主制定的数字化路线图中，打造了 AI 安全咨询助手，彼时尚无人提出这一需求。

  • New programme从零到一

    Designed and launched a related-party security assessment programme from scratch to meet CPS 234, bringing 30+ stakeholders across APAC on board.为满足 CPS 234，从零设计并上线关联方安全评估项目，推动亚太各地 30 余位干系人参与。

  • In-house自主构建

    Built the enhanced CPS 234 assurance methodology in-house instead of buying it, saving external consulting fees.未依赖外部采购，自主搭建增强版 CPS 234 保障方法论，节省了外部咨询费用。

  • Pivots主动转型

    Moved countries, then moved from finance to audit, to cyber, to AI. Each move was chosen, not assigned.从上海到墨尔本，从金融到审计、信息安全，再到 AI。每一步都是主动选择，而非被动安排。

  • After hours工作之外

    Collaborating on AuthRight, writing in public and speaking to students.业余时间参与 AuthRight 项目、公开写作，并为学生做分享。

03AI: view and practiceAI：观点与实践

AI security is a supply chain issue.AI 安全，本质是供应链安全

Almost no one builds AI from scratch. Models, cloud, data, MCP tools and SaaS copilots come from suppliers or open source. The real question isn’t “is our model safe?” but “what are we connected to, and who can change it?”几乎没有企业从零构建 AI。模型、云、数据、MCP 工具，以及 SaaS 中的 Copilot，都来自供应商或开源社区。因此真正的问题不是“模型是否安全”，而是“我们接入了什么，谁能改变它”。

YOURAI 您的 AI MODEL模型CLOUD云DATA数据MCP TOOLSMCP 工具SAAS COPILOTSSaaS CopilotOPEN SOURCE开源组件
Every link in the chain could affect the security of your AI.每一个环节，都有可能影响您的 AI 安全。

Know your AI bill of materials先厘清您的 AI 物料清单

Which models, versions, datasets, plugins, open-source components and vendors sit behind each AI feature.每项 AI 功能背后使用了哪些模型、版本、数据集、插件、开源组件与供应商。

Agents are identities智能体即身份

An agent with tools holds credentials and takes actions within its context, policies and authorisations.能够调用工具的智能体持有凭证，并在既定的上下文、策略与授权范围内执行操作。

Build an AI control plane建立 AI 控制台

Every model, agent and tool call should run through one control plane that holds policy, identity, routing and telemetry.所有模型、智能体与工具调用，都应经过统一的控制台，集中管理策略、身份、路由与实时监测数据。

Third-party assurance has to change第三方评估必须升级

A yearly questionnaire can't keep up with a vendor that ships a new model and a new harness loop every month.一年一次的问卷，跟不上每月更新模型和修改模型管控设计的供应商。

Zero Trust: build as if the supply chain is hostile零信任：假设供应链已被渗透

Watch for open-source and model supply chain attacks: poisoned packages, tampered weights, malicious MCP servers and prompt injection hidden in the content your AI reads.警惕开源与模型供应链攻击：被投毒的依赖包、被篡改的模型权重、恶意 MCP 服务器，以及隐藏在 AI 所读取内容中的提示词注入。

Start with the right architecture架构先行，安全左移

Shift security left into design. Good security architecture is ephemeral, immutable and distributed.将安全左移至设计阶段。好的安全架构应该具备三个特征：短周期、防篡改、分布式。

More detail展开详情
  • Know your AI bill of materials先厘清您的 AI 物料清单

    You can't assure what you can't list. You can't protect what you don't articulate.无法列明的资产，就无从保障；未能识别的企业与隐私数据外流，就无从防范。

  • Agents are identities智能体即身份

    Give it least privilege, scoped tokens and an owner, the same as any service account.与任何服务账号一样，智能体需要最小权限、限定范围的令牌和明确的负责人。

  • Build an AI control plane建立 AI 控制台

    That one layer does three jobs at once, using the same data.这一层基于同一份数据，同时实现三项能力。

    Security安全

    See, log and filter prompts and outputs, enforce policy, and switch infra / LLM providers without rewriting every app.可视、可审计，过滤输入输出、执行策略，并能在不改动各应用的情况下，切换底层云 / 基础模型供应商。

    Token economicsToken 经济

    Tokens are the new unit cost. Meter spend by team and use case, set budgets, cache repeat answers, and route simple tasks to smaller, cheaper models.Token 即新的单位成本。按团队与场景计量支出、设定预算、缓存重复回答，并将简单任务路由至更小、更经济的模型。

    Evals评测

    Every logged call is eval data. Turn real traffic into test sets, score quality continuously, and prove a cheaper or newer model is good enough before you switch.每一条调用记录都是评测数据。将真实流量转化为测试集，持续评估质量；在切换至更经济或更新的模型之前，先证明其足够好。

  • Third-party assurance has to change第三方评估必须升级

    AI vendor assurance needs to be continuous and tied to what changed.AI 供应商保障需持续进行，并紧盯增量变化。

  • Zero Trust: build as if the supply chain is hostile零信任：假设供应链已被渗透

    Apply secure AI engineering by default: pin and scan dependencies, verify model provenance, test with evals and harnesses, and map controls to the OWASP Top 10 for LLM applications.默认遵循安全的 AI 工程实践：锁定并扫描依赖、校验模型来源、以 evals 和 harness 持续测试，并对照 OWASP LLM 十大风险落实控制。

  • Start with the right architecture架构先行，安全左移

    Retrofitting controls onto a finished AI system is slow and expensive. Decide the security shape before the first line of code.AI 系统建成后再补控制，既慢又贵。在写下第一行代码之前，先确定安全架构。

    Ephemeral: agents, credentials and environments live only as long as the task. Short-lived tokens leave nothing to steal tomorrow.短周期（Ephemeral）：智能体、凭证与运行环境仅存续至任务结束。采用短期令牌，明天攻击者便无法盗用身份。

    Immutable: models, prompts and infrastructure are versioned and signed. Redeploy, never patch in place, so drift and tampering stand out.防篡改（Immutable）：模型、提示词与基础设施均有版本、有签名。只重新部署，不在线修补，漂移与篡改一目了然。

    Distributed: no single choke point and no super-credential. Policy can be central, but enforcement and trust are spread out, so one breach doesn’t take everything.分布式（Distributed）：没有单点，也没有万能凭证。策略可以集中，执行与信任必须分散，一处失守不致全盘皆输。

Building now当前合作
AuthRight Harness · Authright Inc · AI-native IAMAI 原生 IAM Collaboration合作项目

Let AI think through IAM before agents implement it.在智能体编写代码之前，先让 AI 把权限想清楚

I'm collaborating with the founder of Authright Inc, a US-based IAM company, on an AI-native, agentic tool that turns business requirements into structured decision graphs: IAM permissions, controls, audit requirements and decision paths, backed by an embedded knowledge graph.我目前与美国 IAM 公司 Authright Inc 的创始人合作。

How it works工作原理

It moves authorization thinking further left, so architects can reason about access before implementation begins.这是一款 AI 原生的智能体工具，可将业务需求转化为结构化的决策图谱，涵盖 IAM 权限、控制措施、审计要求与决策路径，并由内嵌的知识图谱支撑。它将授权思考进一步左移，使架构师在实现之前即厘清访问模型。

  1. Diagnose诊断Scan existing code for identity risks.扫描现有代码中的身份风险。
  2. Decide决策Lock an auth decision package tied to requirements.锁定与需求相对应的授权决策包。
  3. Review复核Check the code agents wrote against that package.检查智能体生成的代码是否符合决策包。

Useful for: IAM solution architecture · access control design · security architecture reviews · AI agent governance · AI-native product design · agentic DevSecOps适用场景：IAM 方案架构 · 授权与访问控制设计 · 安全架构评审 · AI 智能体治理 · AI 原生产品设计 · 智能体化 DevSecOps

Try AuthRight试用 AuthRight Share feedback with me提供反馈
IIIWhy me为何选择我
04Track record过往成果

Risk work that pays for itself.风险管理，同样可以量化回报

13+年years in cyber & tech risk信息安全与科技风险经验
18+个APAC markets partnered with亚太市场协同
X00+家vendors under a cyber risk model I built供应商纳入我搭建的风险管理体系
MonthsWeeksDays数月周天vendor assessment cycle, down from months供应商评估周期，由数月缩短
  • Board level董事会汇报

    Reporting to the CRO, CTO and regular risk & compliance committees on incident response, root cause investigations, and third-party and supply chain AI security risk.定期向 CRO、CTO 及风险与合规委员会汇报事件响应、根因调查，以及第三方与供应链 AI 安全风险。

  • Leadership & delivery领导力与交付

    At KPMG China, ran a 30-person technology risk transformation for a bank: 24 months, close to 100 workstreams across the bank, delivered on time. Also led a 10-person offshore and onshore team.任职毕马威中国期间，统筹某银行科技风险转型项目：团队 30 人，周期 24 个月，覆盖全行近百个工作流，按期交付。另有带领 10 人离岸和在岸团队经验。

See five more highlights展开另外五项成果
  • AI governanceAI 治理

    Led a third-party AI security assurance framework with Group Information Security, Risk, Privacy, Legal and Compliance.牵头建立第三方 AI 安全保障框架，联合集团信息安全、风险、隐私、法务及合规团队。

  • Assurance at scale规模化保障

    Designed cyber assurance for critical third parties under APRA CPS 234: dozens of assessments delivered in-house on an annual basis. Rebuilt TPRM and GRC processes during a global platform migration, cutting assessment cycles from months to days.依据 APRA CPS 234 为关键第三方设计信息安全保障体系，每年内部完成数十项评估；在全球平台迁移中重塑第三方风险与 GRC 流程，评估周期由数月缩短至数天。

  • Deals交易

    IT due diligence on a leading Chinese cloud computing company's CDN, storage, streaming and AI products; C-SOX pre-IPO readiness for a listed investment bank and a fintech unicorn.为一家中国头部云计算公司的 CDN、存储、流媒体及 AI 产品开展 IT 尽职调查；为一家上市投行及一家金融科技独角兽提供上市前 C-SOX 准备。

  • Advisory咨询

    Advised CIOs, CTOs and CROs across banking, insurance, asset management, securities, telecoms, retail, technology, e-commerce and mining on cyber strategy, maturity and regulatory compliance.为银行、保险、资管、证券、电信、零售、科技、电商及矿业企业的 CIO、CTO 和 CRO 提供信息安全战略、成熟度与合规咨询。

  • Network & innovation人脉与创新

    A broad cybersecurity network and trusted relationships with vendors, used to run POCs and POVs and vendor technology assessments on emerging security and AI tools.在信息安全领域拥有广泛人脉，与厂商建立互信关系；主导新兴安全与 AI 工具的 POC / POV 及厂商技术评估。

In public公开发声

On the panel, and on the record.论坛发言，观点公开可查

Industry panelist · Quoted by CISO Series · Writing on LinkedIn and RedNote行业论坛嘉宾 · 多次被 CISO Series 引用 · 持续在 LinkedIn 与小红书分享

Holmesglen panel and quoteHolmesglen 论坛与观点
28 AUG 2026 · Holmesglen Institute · Melbourne + Webex Panelist论坛嘉宾

Holmesglen Industry ConnectHolmesglen Industry Connect 行业论坛

“AI is already changing the expectations for entry-level cybersecurity roles, and quietly raising the bar for new entrants to the industry.”“AI 已经在改变信息安全入门岗位的要求，也在抬高新人进入这个行业的门槛。”

An industry panel for Simulation Week at Holmesglen's Centre for Cyber Security and Digital IT, on industry trends, career pathways, workforce expectations and the future of work in technology. Alongside Jayaprakash Muthusamy (Borderless CS, CREST ANZ) and Jamie Weston (Associate Dean, Holmesglen).Holmesglen 学院网络安全与数字信息技术中心“模拟周”的行业论坛，聊行业趋势、职业路径、雇主期待和科技行业的未来。同台嘉宾：Jayaprakash Muthusamy（Borderless CS，CREST ANZ 董事）和 Jamie Weston（Holmesglen 副院长）。

Read my LinkedIn post →查看 LinkedIn 原帖 →
LinkedIn

Active poster持续分享

Cybersecurity, AI governance and first-principles thinking.信息安全、AI 治理与第一性原理思考。

Follow on LinkedIn →关注我的 LinkedIn → CISO Series

Quoted multiple times多次被引用

Podcasts and live shows where security leaders talk shop. Worth following if you work in security.安全负责人交流实战经验的播客和直播，值得信息安全从业者关注。

Visit cisoseries.com →访问 cisoseries.com → RedNote (Xiaohongshu)小红书 · 路易在墨尔本

In Chinese中文分享

A Shanghainese in Melbourne who moved from finance into cyber.定居墨尔本的上海人，从金融转型信息安全。

RedNote ID 367797087小红书号 367797087View on RedNote →查看小红书主页 →
05Background履历与角色

I’ve sat on every side of the table.不同角色，不同视角，切换自如

From finance to IT audit and IT due diligence, then cyber consulting and running cyber security. From Shanghai to Melbourne. Each perspective along the way made me who I am today.从金融到 IT 审计、IT 尽职调查，再到信息安全咨询与一线信息安全；从上海到墨尔本。每一个不同的视角，最终成就了今天的我。

Shanghai上海Melbourne墨尔本
  1. Finance / Consulting金融 / 咨询CICC · BCG中金 · BCG
  2. IT auditIT 审计KPMG China毕马威中国
  3. IT due diligenceIT 尽职调查Buy-side deals买方交易
  4. Cyber consultant信息安全顾问KPMG AU毕马威澳洲
  5. Cyber operator信息安全一线操盘AIA AU友邦澳洲
SJTU economics
CICC M&A上交经济学 · 中金并购

Finance native金融背景

Every risk has a price.每一种风险都有价格。

IT audit · CPS 234
buy-side DDIT 审计 · CPS 234 · 买方尽调

Auditor & buy-side advisor审计师与买方顾问

Trust, then test the evidence.信任，但须验证。

KPMG Shanghai
& Melbourne毕马威 · 上海与墨尔本

Consultant顾问

Say it so a CEO can decide in five minutes.五分钟促成 CEO 决策。

KPMG China & Australia
client programmes毕马威中国与澳洲 · 客户项目

Programme manager项目管理者

Scope, people and deadlines: land it on time.统筹范围、人员与时间，按时交付。

Line 1 security at AIA友邦 · 一道防线安全

Operator一线操盘者

Own the outcome, not just the report.对结果负责，而不仅是对报告负责。

AI advisory agent
AuthRightAI 安全助手 · AuthRight

Builder建造者

Ship something small and real.先做出小而真实的产品。

LinkedIn
CISO Series · panelsLinkedIn · CISO Series · 论坛

Thought leader思想引领者

Writing in public sharpens thinking.写作，是最好的思考。

10-person team
coaching10 人团队 · 人才培养

People leader团队领导者

Grow people, and let the team shine.成就他人，让团队发光。

A Shanghainese
in Melbourne定居墨尔本的上海人

Bridge连接者

Translate cultures, not just languages.跨越语言，更跨越文化。

Full career timeline完整职业履历
  1. 2023 – now至今
    Technology Controls & Governance Manager科技控制与治理经理
    AIA Australia · Melbourne

    Cyber risk, AI security architecture review, incident and risk event response, and supply chain and third-party risk management. Joined as Third Party Security Manager; took on the wider remit in 2026.负责信息安全风险、AI 安全架构审查、应急与风险事件响应，以及供应链与第三方供应商风险管理。2023 年以第三方安全经理身份加入，2026 年起承担更广泛的职责。

  2. 2019 – 2023
    Manager, Technology Risk & Cyber科技风险与信息安全经理
    KPMG Australia · Melbourne

    Advised CIOs and CTOs in banking, insurance, telco, retail and mining on cyber strategy, maturity and CPS 234.为银行、保险、电信、零售及矿业企业的 CIO、CTO 提供信息安全战略、成熟度评估与 CPS 234 咨询。

  3. 2014 – 2019
    Manager, IT AdvisoryIT 咨询经理
    KPMG China · Shanghai

    Technology and operational risk transformation for banks, insurers and securities firms across Greater China. IT due diligence and pre-IPO readiness for Chinese tech unicorns, including a leading e-commerce platform, a leading internet finance company and a leading cloud computing company.为大中华区银行、保险及证券公司提供科技与运营风险转型服务；为中国科技独角兽开展 IT 尽职调查与上市前准备，包括头部电商平台、头部互联网金融公司及头部云计算公司。

  4. 2013 – 2014
    Bachelor of Economics, and where it started: finance经济学学士，以金融为起点
    Shanghai Jiao Tong University · exchange at University of Victoria, Canada上海交通大学 · 加拿大维多利亚大学交换

    Internships at CICC Investment Banking (M&A team, Beijing), Boston Consulting Group (BCG, Shanghai), Standard Chartered Bank (Shanghai) and Harvest Fund Management (Shanghai).实习经历：中金公司投资银行部并购组（北京）、波士顿咨询公司 BCG（上海）、渣打银行（上海）、嘉实基金（上海）。

Connect · Share · Grow · Reflect · Be grateful链接 · 分享 · 成长 · 感悟 · 感恩

If you’re building, I’d like to hear about it.如果您也正在探索 AI 的旅途中，期待与您交流

Boards and executives, investors and deal teams, founders and builders, or anyone working where AI meets risk. Connect on LinkedIn or WeChat, or send me an email.董事会与高管、投资与并购团队、创业者与 builder，以及所有在 AI 与风险管理相关领域工作的人。欢迎通过 LinkedIn、微信或电子邮件联系我。

Connect on LinkedIn在 LinkedIn 联系我
LinkedIn
Email邮箱
WeChat微信