Yuezhong Bao

Lead cybersecurity, risk, and technology functions for Alibaba International Digital Commerce, supporting a global portfolio that includes AliExpress, Lazada, Daraz, Miravia, and Alibaba.com. Oversee regulatory and financial compliance across multiple jurisdictions and lead enterprise initiatives to manage AI, cyber, and data security risks. Strengthen customer trust, improve platform integrity, and reduce losses from fraud, abuse, and regulatory non-compliance.

Serve as Group CISO for Lazada, leading cybersecurity across e-commerce, logistics, and payments businesses spanning Southeast Asia, South Asia, Korea, and Europe. Built and scaled security capabilities to support business growth, strengthen customer trust, and meet regulatory requirements across multiple markets. Partner with senior business and technology leaders to integrate security and risk management into strategy, operations, and product development. The role later expanded to include Risk Product & Technology, driving fraud prevention, account security, and platform governance.

Led Coupang's global cybersecurity organization across South Korea, the United States, and China, defining security strategy and managing cyber risk through a period of rapid growth and the company's transition to a public company. Partnered with executive leadership on cyber resilience, governance, and IPO readiness, including SOX compliance and disclosure requirements. Supported strategic initiatives including M&A due diligence and post-acquisition integration.

Built, led, and scaled a global team of security architects and engineers across five cities in three countries to protect Coupang's infrastructure and services. Developed opinionated solutions, tools, and automation to address security challenges while reducing the “security tax” on engineering teams. Played a key role on a cross-functional team driving the AWS migration and microservices transition, implementing robust security controls. Spearheaded the development of multiple security engineering solutions, including the secure development pipeline, internal and external IAM platforms, and the secrets management service.

Built and led a team of security engineers, technical program managers, and risk managers overseeing both Amazon's corporate information security and the security of Amazon's China-based business.

Worked as part of the global Trustworthy Computing Security team, driving cross-company security initiatives in collaboration with various product groups and engineering teams.

Assumed overall responsibility for Security, Privacy, and Business Continuity (SPC) for Nokia’s mobile internet services in China, including the Nokia Store, Music, Life, Payments, Advertising, Browser & Messaging, and Location & Commerce.

Worked as part of the global Information Security and Risk Management team, focusing on all aspects of Application Security Assessment, Consulting, and Engineering (ACE).

Worked in NCR’s Payment Solutions engineering team, where I was responsible for designing and implementing backend systems for several large-scale, critical banking applications. This involved integrating a wide range of server, database, and storage technologies to meet strict security, performance, and availability requirements.

Worked at PixStream, a technology startup that developed a suite of video networking hardware and software solutions. PixStream was acquired by Cisco in late 2000.