Albert Kwok

Spearheaded the Security Operations team in alignment with the organization's cybersecurity strategy, owning delivery of mission-critical services encompassing Endpoint Security, Identity & Access Management, Network Security, Certificate Management, Threat & Vulnerability Management, Data Loss Prevention, and Cloud Security. Key Responsibilities - Directed team of 15+ specialists, providing executive representation on cybersecurity governance committees and forging strategic partnerships with departmental leaders to advance organizational objectives. - Maintained accuracy in cybersecurity metrics for executive KPI/KRI reporting, benchmarking against risk appetite and posture; integrated industry-leading best practices to elevate controls and institutionalize enterprise-wide security baselines, including cloud environments. - Enforced uniformity across cybersecurity policies, standards, and SOPs; architected and deployed a sophisticated risk-based Threat & Vulnerability Management framework; led cloud security governance; and spearheaded audit remediation by owning comprehensive management action plans. Strategic Leadership & Impact - Collaborated with business stakeholders to harmonize operational imperatives with stringent end-to-end protection across hybrid and cloud infrastructures, advised senior executives on strategic cybersecurity direction, and stewarded annual budgets encompassing technology refresh initiatives, headcount, CAPEX and OPEX optimization. - Cultivated talent and fostered a resilient team culture; actively contributed to cyber incident resolution in coordination with SOC, incident response teams, law enforcement, and third-party specialists.

Chief Information Security Officer (CISO), HSBC Hong Kong Led the cybersecurity strategy and operations for HSBC Hong Kong, safeguarding critical banking infrastructure across retail, corporate, and wealth management divisions in one of Asia's most regulated financial hubs. Key Responsibilities - Directed the establishment and evolution of enterprise-wide cybersecurity programs, ensuring alignment with HKMA, SFC, and global Group standards while pioneering local adaptations for regulatory compliance. - Oversaw risk assessments, third-party vendor due diligence, identity access management, and penetration testing initiatives, including HKMA CFI/CRAF, iCAST, and CISP frameworks. - Managed exception governance, security awareness campaigns (eLearning, phishing simulations), and KRI/KPI reporting to executive leadership and Board committees. Strategic Leadership & Impact - Represented HSBC in regulatory engagements with HKMA, SFC, and industry forums (e.g. HKMA Threat Intelligence Sharing, FS-ISAC, and HKAB/ASTRI CISP), fostering proactive threat intelligence collaboration. - Drove cyber risk culture transformation through cross-LoD partnerships, developing CRAS statements, robust controls, and secure-by-design integration for digital transformation projects. - Delivered quarterly Board presentations on cyber posture, emerging threats, and resilience metrics, contributing to global policy development and regional CISO enablement across Asia.

Deputy Chief Information Security Officer, DBS Bank (Hong Kong & Macau) Established and led the independent cybersecurity function for a major retail and corporate bank across Hong Kong and Macau, driving compliance with global standards and local regulations like SFC Internet Trading Guidelines. Key Responsibilities - Built new cybersecurity function from inception, rolling out the Group Cybersecurity Management Framework regionally and supporting CISO setups in smaller markets. - Drove policy compliance, developed local addendums for HKMA/SFC/AMCM/MAS requirements, and contributed to global cybersecurity policies/standards. - Provided technical and policy guidance, represented the bank in regulatory audits/surveys, and maintained direct relationships with regulators (HKMA, SFC, AMCM, MAS) and third parties. Strategic Leadership & Impact - Led HKMA CFI/CRAF assessments (Phase-1 bank), developed CRAS and C-KRI frameworks, and presented cyber profiles/threats to HK Risk Exco monthly and BRMC quarterly. - Championed cyber risk culture via eLearning, phishing simulations, targeted training, and collaboration across Lines of Defense for robust logical/physical controls. - Represented DBS at key forums including HKMA Threat Intelligence Sharing, FS-ISAC, HK Interbank Cyber Forum, HKAB/ASTRI CISP, and industry events.

Regional Information Security & Fraud Manager (Asia Region) Led the information security and risk management framework across Asia, ensuring alignment with global policies while serving as the regional subject matter expert. Championed secure operations through vendor assessments, access governance, and proactive risk monitoring in a dynamic financial services environment. Key Responsibilities - Aligned regional entities with global information security policies and conducted Application Risk and Security Assessments to evaluate criticality and drive remediation. - Led third-party vendor security due diligence, including penetration testing for corporate websites and regulatory risk evaluations. - Managed Identity Access Management, annual user recertification, and exception governance for policy requests. Strategic Impact - Delivered KPI/KRI reporting to regional and global stakeholders on security posture and incidents. - Coordinated regulatory reviews (e.g. HKMA, MAS) and provided operational risk consultation. - Monitored data leakage anomalies, escalated investigations, and supported infrastructure/digital transformation projects for secure-by-design outcomes.

BRCM Manager / BIRO responsible for the execution of operational / IT risk management activity across HSBC Insurance Hong Kong.

Senior Information Security Analyst / AVP within dedicated security and risk function of renowned Global Bank focusing on APAC region.

Senior Information Risk Officer within global financial services provider responsible for the information security program across Hong Kong and Macau.

Senior Security Consultant providing advisory services to internal and external clients on behalf of a major UK business processes outsourcing organisation.

IT Security consultant on behalf of ISF (Information Security Forum) - a specialist division of PwC.