Daniel Wong, Cybersecurity Thought Leader💫 MBA,CISA,CISM

Daniel leads the development and execution of enterprise-wide cybersecurity strategies, ensuring alignment with business objectives and reporting directly to the CIO. He drive strategic initiatives that enhance risk management, elevate cyber resilience, and embed a security-first culture across all business units. He provides executive oversight of security frameworks, governance, policies, and controls to meet regulatory, legal, and industry-specific requirements. By partnering with senior leadership, Daniel position cybersecurity as a core business enabler—translating complex risks into actionable insights that drive informed decision-making at the executive level. He leads cross-functional collaboration with the technology teams and third-party partners to build scalable, resilient, and secure capabilities. His focus includes enhancing organizational security maturity, managing enterprise risk, and ensuring ongoing compliance with internal and external standards. His responsibilities span the full cybersecurity lifecycle—from establishing and enforcing policies to overseeing risk assessments, control performance, remediation planning, and exception handling. Daniel work closely with risk and compliance teams to address regulatory obligations and deliver regular updates to the board of directors and senior management team. He embeds security across IT delivery and operations, lead regulatory audits, and drive governance improvements through centralized control management. Daniel also champion organizational awareness through targeted training and threat intelligence programs. He builds and mentor high-performing cybersecurity teams with expertise across application security, risk management, vulnerability assessment, regulatory compliance, and audit readiness—ensuring the organization stays ahead in an ever-evolving threat landscape.

Daniel leads the Information Security and Compliance strategy across the Asia Pacific region, ensuring alignment with global standards and meeting the evolving expectations of customers and regulators. He spearheads SOC 2 and ISO 27001 audit initiatives, managing end-to-end compliance activities across regional operations. As a trusted Information Security Advisor to both Business and IT teams, he integrates security best practices into project lifecycles and ensures regulatory alignment throughout. Daniel also oversees and strengthens the organization’s Information Security framework, delivering robust governance and continuous enhancement of security posture. He regularly develops, reviews, and maintains security policies and procedures to stay ahead of emerging threats and compliance demands. In his role, he leads Data Privacy and Information Security awareness programs, fostering a culture of security across all levels of the organization. He also supports client engagement and RFP processes, responding to security-related inquiries, completing data privacy questionnaires, and contributing to successful tender submissions. Daniel drives regional Information Security and compliance projects, coordinating cross-functional teams to achieve shared security goals. He leads incident response efforts, ensuring swift resolution, clear reporting, and lessons learned. With strong technical oversight, Daniel evaluates and supports security technologies—including Cloudflare WAF, CrowdStrike, Comodo AV, PRTG monitoring, Wi-Fi and physical security, vulnerability scans, and penetration testing—working closely with IT Infrastructure and Development teams to implement continuous improvements. Lastly, Daniel mentors and advises cross-functional teams—including IT, Software Development, and Business units—on secure architecture and operational best practices, reinforcing a security-first mindset across the organization.

Daniel oversees the management and effective delivery of all aspects of Information & Cyber Security, as well as data privacy, supporting Schaeffler’s operations across 11 countries in the Asia Pacific region. In his role, he collaborates with all levels of the organization, including senior leadership, on critical information security topics and projects essential to safeguarding the organization’s security posture. He works closely with management and the user community to understand business needs, implement robust security practices, and identify opportunities to enhance security and compliance. Additionally, Daniel leads information security assessments for new business initiatives and drives the implementation of security programs and activities. These efforts ensure alignment with group standards under the key pillars of Information Security & Cybersecurity, IT Security, OT Security, and Data Privacy.

Daniel is a key member of the management team overseeing information security, OT security, and data privacy across 13 countries in the APAC region, reporting to the APAC CIO. In his role, he leads and represents the information security function within the BIS APAC management team, serving as the primary point of contact for Asia Pacific-based stakeholders. He provides strategic oversight and support for all information security initiatives, driving the execution of actionable plans tailored to the APAC region. Daniel actively collaborates with regional stakeholders to strengthen relationships, remove barriers, and ensure the effective execution of information security and data protection programs. He advocates for information security as a business enabler, identifying opportunities for improvement and fostering a culture of proactive security practices. In addition, he ensures that security governance, risk, and compliance processes are executed in alignment with group standards while accommodating regional and local contexts. He also supports APAC-wide information security awareness initiatives and delivers user training as needed. Last but not least, Daniel also advises stakeholders, including the management team, on information security-related matters and provides guidance on appropriate courses of action to address queries and challenges effectively.

Daniel specializes in identifying, assessing, and managing risks associated with the use of technology in banking. He is responsible for safeguarding the bank's information systems, data, and technology infrastructure against potential threats and vulnerabilities. In his role, Daniel conducts comprehensive risk assessments to identify potential threats and vulnerabilities. This includes evaluating the likelihood and potential impact of risks such as cyber threats, data breaches, system failures, and regulatory compliance issues. Following these assessments, he develops and implements risk mitigation strategies and controls to minimize both the likelihood and impact of identified risks. Daniel also ensures the bank complies with MAS regulations and guidelines related to technology. This requires staying updated on evolving regulatory requirements, conducting regular compliance assessments, and implementing measures to address any gaps in compliance. In addition, he plays a crucial role in managing risks associated with third-party vendors and service providers as part of the bank’s vendor risk management program. This involves evaluating vendors' security practices, conducting due diligence, and establishing robust risk management protocols for vendor selection, contract negotiation, and ongoing monitoring.

Adopting the ISO 27001 security framework, Daniel specializes in assessing and evaluating the effectiveness and security of organizational IT systems, controls, and processes. He reviews and enhances IT controls, policies, and procedures to ensure they effectively mitigate risks and align with business objectives, thereby strengthening the overall IT governance framework. This involves analyzing documentation, conducting interviews, and performing tests to assess the adequacy and effectiveness of controls. Additionally, he conducts risk assessments to identify IT-related risks that could impact the organization's operations, systems, and data, recommending actionable mitigation strategies. Daniel develops audit plans and procedures based on risk assessments and organizational objectives. This includes defining audit scopes, gathering evidence, performing data analysis, and engaging with stakeholders through interviews. He identifies control deficiencies and recommends appropriate corrective actions to address them. Daniel also communicates audit findings and recommendations to management and stakeholders. He prepares comprehensive audit reports summarizing observations, identified risks, control deficiencies, and actionable recommendations. By engaging in discussions with management, he provides valuable insights to strengthen controls and enhance IT governance.

Daniel oversees the information security setup and overall security posture, starting from Singapore and expanding to regional countries including Malaysia, Thailand, Vietnam, Indonesia, and the Philippines. He is responsible for designing and implementing robust security architectures and frameworks, including developing security policies, standards, and procedures aligned with industry best practices such as ISO 27001. This includes establishing secure network configurations and deploying essential security technologies to safeguard against unauthorized access and data breaches. Daniel leads a team of information security professionals in developing and executing incident response plans to address and mitigate security incidents. This involves establishing protocols for detecting, reporting, and responding to incidents promptly, as well as investigating incidents, containing threats, and restoring business operations. Post-incident analysis is conducted to identify areas for improvement and strengthen future defenses. In addition, Daniel fosters a culture of security awareness within the organization by conducting security awareness training. These initiatives empower employees to understand their roles and responsibilities in maintaining a secure environment. Daniel also conducts regular vulnerability assessments and penetration tests to identify weaknesses in the organization's systems and networks. For identified vulnerabilities, he oversees remediation efforts, including implementing patches, security updates, and configuration changes. He ensures processes are in place for continuous vulnerability monitoring and timely remediation to maintain a strong security p

Daniel is responsible for the day-to-day management of the organization’s IT infrastructure, ensuring the efficient, secure, and reliable operation of computer systems, networks, and servers to meet users' needs. He oversees the installation, configuration, and maintenance of servers and network infrastructure. This includes monitoring network performance, troubleshooting connectivity issues, and ensuring high network availability to minimize downtime. His efforts maintain a stable IT environment that supports user productivity and business continuity. In addition, Daniel provides technical support to users, addressing hardware, software, and connectivity issues. He troubleshoots problems efficiently and delivers timely resolutions to ensure seamless IT operations.

Daniel is responsible for designing, implementing, and maintaining robust Microsoft server solutions, ensuring the smooth operation of the technology environment for external clients. His role includes supporting and ensuring the availability, performance, and security of servers while effectively integrating various technologies to meet clients' business needs. From system design and architecture to implementation and deployment, he ensures compatibility and interoperability between different systems and technologies. Additionally, Daniel focuses on system performance and optimization, identifying bottlenecks, fine-tuning server configurations, and implementing solutions such as load balancing and resource allocation to enhance overall system efficiency. He collaborates closely with internal and external support teams, troubleshooting issues, providing technical assistance, and contributing to problem resolution to maintain a seamless IT environment.solution.