User:Zhousheng

•Over 5 Years information risk management experience in Financial Institution, familiar with ISO/IEC 17799，ISO/IEC 27001，ACSI33，ISO 13569 etc;

- Developing and implementing the Security Policy and Guideline.
- Policy compliance review annually;
- Performed Risk assessment on OS / DB / Business Applications / Network Devices
- Presented Information Security Reports to the VP and Asia Regional Leader
- Prepared and presented Information Security Awareness Training to internal employee

•Over 3 Years information risk/operational risk management experience in Internet field;

- Responsible for Information Security management teams,including application security ,network security and security management teams;
- Developing and implementing the Security Policy and Guideline.
- Take measures against fraud,Anti-Spam etc(Fetion, 2nd biggest IM software in China);

•Over 3 Years IT operation maintenance in Wholesale Field; •Familiar with effective measures to analyze abnormal behavior in Instant Message field; •CISSP,CIW SECURITY ANALYST,MCSE