Khong Kong

I’m a senior cybersecurity and IT security professional with over 20 years of experience across telecommunications and financial services. I’m known for structured, results-driven leadership and a pragmatic approach to security program delivery, with a strong ability to align technical initiatives with business strategy.

In my current role as Cybersecurity Project Manager at U MOBILE SDN BHD, I’ve developed and implemented enterprise-wide application security standards and secure development practices. I review and enhance security architecture for applications, APIs, and cloud deployments, lead penetration testing and vulnerability assessments, and roll out controls to ensure compliance with ISO 27001, NIST, and PCI DSS. I also integrate automated code scanning (SonarQube) into CI/CD pipelines, deploy Microsoft Intune (MDM) and enterprise-grade EDR, and support vendor sourcing and tender evaluation for cybersecurity solutions.

Previously, as IT Security Manager at Prudential Services Asia, I provided regional managed cybersecurity assurance across 11 APAC markets and led vulnerability management and application security operations. I standardized static code review processes, developed regional cybersecurity strategies covering cloud security, DevSecOps, and DLP, and expanded network discovery and vulnerability scanning to strengthen proactive risk identification. Earlier at AIA Berhad, I directed governance, risk, and security assessments for enterprise applications and infrastructure, enhanced secure SDLC processes, and drove audit remediation for regulated systems—always with a focus on measurable assurance and durable security outcomes.