Overview
Work History
Education
Skills
Certification
Timeline
Generic

Koh Rui Xin

IT Risk And Compliance

Overview

4
4
years of professional experience
4
4
years of post-secondary education
4
4
Certifications

Work History

IT Compliance Associate

Monee, Northern Point Technology
07.2024 - Current
  • Country PIC for IT Compliance in SeaBank Philippines and SeaBank Indonesia
  • Develop and implement IT Procedures aligned with the Banks' policies and regulatory requirements to ensure operational consistency and compliance
  • Face internal and regulatory audits, including preparation, walkthroughs, providing audit evidences and clarifications, and following up on remediation of audit findings
  • Oversee and coordinate key IT risk BAU activities with local and overseas teams, such as:
    - VAPT (Vulnerability Assessment & Penetration Testing)
    - System and infrastructure hardening
    - Disaster recovery (DR) exercises
    - Phishing simulations and cyber incident response drills
    - System go-live, change management, and decommissioning processes
  • Drive ad-hoc projects, including automation of the vulnerability management process to enhance the timeliness of vulnerability follow ups and adherence to SLA

Cyber Incident Response Intern

KPMG Services Pte Ltd.
05.2023 - 12.2023
  • Triaged server logs from 3 hosts in the SIEM and pieced together an attack timeline in 3 days
  • Performed threat hunting on a total of 12 sites and 1,585 endpoints using SentinelOne and Elasticsearch
  • Built a comprehensive database of threat actors and groups in APAC region and their TTPs for threat monitoring
  • Organised and facilitated a client Response Training Exercise by setting up a vulnerable website on the cyber range and carrying out a command execution attack. Exercise was feedbacked by all 15 participants to be useful and engaging
  • Researched on bypass techniques for Data Loss Prevention (DLP) software and crafted 24 comprehensive test cases for a client's software, discovering 2 vulnerabilities

Legal Operations and Compliance Intern

Lazada Singapore Pte Ltd.
06.2021 - 08.2021
  • Streamlined the Contract Management process into one platform, which was pushed out to 6 Southeast Asia legal teams
  • Designed a user-friendly and functional web-based system for submission and storage of weekly legal team reports for 6 countries' legal teams comprising a total of 40-50 team members, with tagging, categorization, and data extraction features. Spearheaded the roll out of the System.

Education

Bachelor of Science - Computing & Law

Singapore Management University (SMU)
08.2020 - 05.2024

Skills

  • Regulatory Frameworks: ISO27001, NIST, SOC 2, PCI DSS, SOX, COBIT

  • Policy, Procedures, and Standards development and enforcement

  • Risk Management and BAU

  • Audit Coordination

  • Project Management

  • Python

  • Stakeholder Management and Cross-Functional Collaboration

Certification

SC-200 Microsoft Security Operations Analyst (2023)

Timeline

IT Compliance Associate

Monee, Northern Point Technology
07.2024 - Current

Cyber Incident Response Intern

KPMG Services Pte Ltd.
05.2023 - 12.2023

Legal Operations and Compliance Intern

Lazada Singapore Pte Ltd.
06.2021 - 08.2021

Bachelor of Science - Computing & Law

Singapore Management University (SMU)
08.2020 - 05.2024
Koh Rui Xin IT Risk And Compliance