- Enhanced information security of the digital teaching platform by developing risk management processes and building security controls for the increasing demands of online learning
- Built an information security management system to acquire the ISO 27001 certificate in July 2020

National Taiwan University

Research Associate 

Cyber Security

ISO 27001

Information Security Management

Contract - Research Associate 

Sydney

Master of Business Administration

The University of Sydney

I joined the IT industry with a great passion for transforming new technologies into viable businesses and became a successful technology risk consultant at Deloitte & Touche. I always believe that the appropriate use of technology can make significant impacts on the world.

I have great experiences in enterprise cybersecurity, technology development, and risk management in the past six years of consultant life. I also have established new consulting services in Deloitte in electronic payment, cloud compliance, and Blockchain. I led several projects to help my clients enhance business models with these emerging technologies and solve their pain points well. I have also led expert teams in Deloitte Taiwan to obtain one invention patent on a blockchain-based carbon trading system and one utility model patent.

Now, I am a USyd MBA student. Learning business skills, such as leadership, design thinking, and financial management, would let me become an IT consultant with the ability to build business comprehensive strategies in both business and IT domains.

Reported directly to the Partners of Deloitte, developed new consulting services in the Regulatory and Technology Risk Team, helped clients grow new businesses.

Deloitte & Touche

Manager

- Built a new team to develop new services for Deloitte; devised and executed technology-related projects with clients to compliantly develop new businesses with novel technologies, such as blockchain and cloud computing.
- Led the blockchain research team

Assistant Manager

Implemented cybersecurity assessment projects, including penetration tests, access control, and network infrastructure assessments, and social engineering tests

- Directed clients to implement information security management systems and privacy and personal data protection systems, to acquire ISO 27001 and BS 10012 certificates.
- Designed solid data protection mechanisms and access control policies for payment card companies to be PCI DSS certified.

Consultant

- Implemented cybersecurity devices such as firewalls and data loss prevention solutions for government agencies and international banks.
- Provided cybersecurity and network infrastructure consulting service through solving customs’ networking problems or avoiding cyber attacks.

MengChieh Chang / Contract - Research Associate

Research Associate

National Taiwan University

Progress

Skills