David C. CISM, CRISC, CISA, CGEIT, CDPSE, CCISO, CCSK, CEH, SIRM, PMP, TOGAF, SFC, SSY/GB, FIPA/FFA
CybersecurityGRC | InfoSec & Cybersecurity (ex-CISO/BISO) | Audit & Assurance | Internal Control (SOX) | Project & Data Management | Operations Excellence & Resilience | Transformation | Regulatory Advisory (Acting Head, Compliance)
Hytech Technology | Hytech Consulting Management Sdn Bhd
Seri KembanganMember since June 23, 2026
About
Professional Qualifications:- Technical Risk Specialist (SIRM) awarded by IRM (https://www.theirm.org/) CRISC, CISM, CISA, CGEIT, CDPSE C|CISO, CEH, Associate C|CISO CCSK PMI-PMP TOGAF® 9 Foundation (BoK EA v9.2) Six Sigma Yellow Belt + Six Sigma Green Belt by 6SigmaStudy (https://www.6sigmastudy.com/) Scrum Fundamentals Certified (SFC™) by ScrumStudy (https://www.scrumstudy.com/) Professional Certification in Financial Accounting (AFA -> FIFA) by IFA (https://www.ifa.org.uk/) Conferred as Fellow by IPA (https://www.publicaccountants.org.au/) Fellow Financial Accountant FFA FIPA BSC Computing (Hons) Professional Memberships:- Member, IRM Member, ISACA-ITL, ISACA-MY Member, PMI Fellow Member, Institute of Public Accountants (IPA), Australia Fellow Member, Institute of Financial Accountants (IFA), UK Education: Graduated with Degree in Computing/Information Technology (Hons) Giving back to society:- Cybersecurity Mentor nominated by ECC Exploring: ISO/IEC 27001 LI Background Profile:- Being an ex-auditor with exposure to a risk-based approach coupled with an IT and accounting background has facilitated my understanding of emerging business and IT risks and associated controls in an integrated manner. I am ready to propel myself as a business partner; welcoming any opportunities rendered to me, with a strong interest in IT Risk Management, IT Governance, Compliance, Information Security, and Assurance with the opportunity to implement Framework / Program. Currently serving as Risk Management & Compliance (2nd LoD) in various subject matter capacities. Leading IT Risk and IT Compliance as well as appointed CISO in dual roles being responsible for Tech Risk function as well as technology and cyber-related policy-maker. Reporting to CRO, i am also entrusted to lead the Compliance function (interim) through the many assigned roles and responsibilities under my purv
Top Skills
Skills
TOGAFInformation SecurityRegulatory ComplianceCloud ComputingFinancial ServicesData StandardsSecurity ManagementSecurity ComplianceBusiness AnalysisFinancial ManagementLeadership ManagementCybersecurityEnterprise ArchitectureData PrivacyRisk ManagementRisk Assessment
Education
CompTia (online)
Certification, IT Fundamentals+
January 1, 2020 – Present
SecureIOT Academy
Online Bootcamp, Information Systems Security Professional (ISSP)
January 1, 2020 – Present
MeetCyber
Member, Cyber security
January 1, 2020 – Present
ISACA
Certification, Cybersecurity Fundamentals
January 1, 2019 – Present
Member of Institute of Enterprise Risk Practitioners
Professional Certificate, ERM
January 1, 2016 – Present
Experience
Hytech Technology | Hytech Consulting Management Sdn Bhd
Head of GRC, Group BIT (Business & IT)
January 1, 2026 – Present
On-site
Hytech Technology | Hytech Consulting Management Sdn Bhd
BIT, Cyber, Information Security GRC & Audit Managing Lead | Data, Project, AI | Assurance
October 1, 2025 – Present
On-site
Hytech Technology | Hytech Consulting Management Sdn Bhd
BIT, Cyber, Information Security GRC & Audit Leader (Advisor)
October 1, 2025 – Present
On-site
QL Resources Group
Staff Club Organizing Committee - Secretary
January 1, 2025 – September 1, 2025
On-site
QL Resources Group
Projects
Cloud Governance Framework
June 1, 2025 – Present
Appointed Cloud Champion to drive the adoption of GRC across the strategy and governance management, cloud-related risk and compliance, security architecture, IAM, information and privacy protection, incident management, threat intelligence and vulnerability management, etc. to ensure cloud enablement supporting QL cloud journey.
Modern Office Transformation - M365 Migration
May 1, 2025 – Present
Appointed as Technical Security Lead & Champion for the project: Leadership in driving Microsoft 365 adoption across QL. Help evangelize M365 cloud-based. Oversee all the technical aspects of the rollout - security, architecture, integrations, etc.
Security Awareness Training (SAT)
April 1, 2025 – Present
Building a sustainable program to continously inculcate and promote a risk-aware culture across QL to ensure staff equipped with ongoing cyber hygiene practices. Exploring viable SAT offering by Proofpoint, KnowBe4, etc.
Cybersecurity Maturity Assessment
Certifications
Certified in the Governance of Enterprise IT (CGEIT)
ISACA
June 23, 2026 – Present
Certificate in Financial Accounting
The Institute of Financial Accountants
June 23, 2026 – Present
Fellow Member of Institute of Public Accountant (Aus)
Institute of Public Accountants
June 23, 2026 – Present
Certified Information Systems Auditor® (CISA)
ISACA
June 23, 2026 – Present
Certified in Risk and Information Systems Control (CRISC)
ISACA
June 23, 2026 – Present