//assets.cakeresume.com/assets/contentarea/contentarea-2d64eca8dae2a1ffb31e0fb1df887bbad072c7c19734d7d30fa14884bbcc299a.css

ISO 27001 LA

About me：
 I have a cheerful personality, and I have a good relationship with family and people.

After graduate school research on machine vision, I had the chance to apply the reach in my former company (TRI Inc.). And assisted the transfer of technology in East China (Shanghai, Suzhou), to the establishment of the Southeast Asia and IBD (International Business Departmant ) customer service team. 

After TRI's aoi work. I joined the Taipei City Government team, and joining the smart city project of Mayor Kou (107~108 Transportation Bureau APP on iOS and Android systems), and also took over the government procurement project. Cooperate with the court to enforce the system's consolidation. In the Taipei City Government team. After that, I focus on Information Security of New Taipei City's Social Welfare system, helping  New Taipei City Government take care citizen's personal information security.

Now at National Center for Cyber Security Technology(NCCST), my job is keep ISO management system working and NCCST's information security plans. Review each system control item of NCCST. Handle internal and external audits and ISO 27001 and information security law standard projects, and conduct internal testing in the center to promote the information security management system to all agencies in Taiwan in 2023.

YZU University (元智大學)

真理大學 Aletheia University

Senior Planner

Yang, Tsung-Hsun

National Center for Cyber Security Technology

Job content: (A-level agency information security full-time staff)
1.About ISO system：
1-1. NCCST's ISO 27001, ISO 20000, BS 10012(ISMS, SMS, PIMS) management system education and training.
1-2. Information asset inventory, risk assessment, management review meeting tracking and control
1-3. Internal and external audit
1-4. Business Continuity Plan (BCP) management, social engineering, information security health diagnosis, vulnerability scanning and penetration testing management examination tracking

2. System protection and control review
2-1. New system classification, online control item review, risk assessment
2-2. Maturity assessment of information security governance in technical service center
2-3. Writing and revising the information security maintenance plan of the whole center
2-4. Signing of operation level agreement (OLA) and service level agreement (SLA)
2-5. Service catalog, service inventory, satisfaction analysis
2-6. Collection and tracking of personal information goals (PIMS-related)
2-7. In 1112, the new ISO system introduction plan of the National Information Security Research Institute and the adjustment of the relevant management system four documents

Social Welfare Department, New Taipei City Government
Cyber security experience:
1. Implementation and introduction of ISO 27001 in the first year (for the first time), maintenance inspection and contract request proposal (RFP) planning, procurement and acceptance in the second to third years.
2. Lecturer of the information security education and training course of the Social Bureau.
(According to the Technical Service Center of the National Information Security Conference of the Executive Yuan: Information Security Functional Certificate)
3. Bsi third-party verification pre-plan, import operation, verification report.
(Passed Bsi verification in October 2020: Social Welfare Management Information System ISMS Procurement Handling, Import, Procurement Acceptance)
4. Information security audit of the Central Health Insurance Administration, security audit of city government cloud certificate packages.
(Such as: Police Station, Education Bureau, Finance Bureau, District Offices, etc.).
5. Information security and personal information audit of outsourced information vendors and organizations.
6. Information security contact window of each business department and affiliated level 2 units

Personal license, certificate:
1. SGS issued: ISO 27001 LA lead auditor certificate
2. Issued by the National Information Security Technology Service Center of the Executive Yuan: Information Security Functional Certificate (Introduction to Information Security)

New Taipei City government

Cyber Security Analyst

Taipei City Goverment (Parking Management and Development Office)
1. C-level agency Information Security Management System (information security) business.
2. Beishi Action APP system management and procurement acceptance.
3. Smart city cross-office system process planning and review proposals.
4. Compulsory enforcement project.

Taipei city government   (臺北市政府)

Information Engineer

Engineering Supervisor of South East Regional Business Center
April 2014 – May 2017                Malaysia

*Team up South East Asia engineer team. The territory includes Malaysia, Singapore, Thailand, Vietnam, Philippine, India and Indonesia.

*Responsible for engineering center management, process planning reform, as well as customer service performance goal setting and management.

*Educating and technical consulting for East China sales and engineering team.

*New software interface education information transfer to application engineer. 

-Won Q2 outstanding staff.
-Won the ASUS Group evaluation on January 2014.

Yang, Tsung-Hsun’s posts