Roy Ngo

Trainer's Bio

IT Compliance & Audit Leadership

Roy is a seasoned compliance professional, with specialized experience in IT security frameworks and regulatory requirements. His last role was the Group IT Compliance Manager at Singapore Airlines, leading PCI DSS compliance initiatives and managing information security standards implementation across the organization. Previously delivered high-impact compliance services at Standard Chartered Bank Singapore, conducting comprehensive IT cybersecurity audit responses and regulatory assessments. As a PCI DSS Qualified Security Assessor (QSA) at Verizon Communication Singapore, provided expert consultation to enterprise clients including financial institutions and aviation companies. Extensive experience conducting IT audits referencing ISO 27001, MAS Technology Risk Management Guidelines, COBIT, and SSAE 3402 standards at BDO LLP and SembCorp Marine. Demonstrated expertise in vulnerability management, process improvement, and translating complex security requirements into actionable business strategies.

Technical & Process Consultation

Prior experience includes implementing IT Service Management processes at BMC Software, storage solutions at Quantum South Asia, and enterprise software solutions at IBM and Cisco Systems. Specialized in aligning technical implementations with business objectives, leading cross-functional teams, and driving service improvement initiatives that resulted in successful client renewals and upselling opportunities. Developed expertise in ISO 9000:2008 internal audits and second-party consultancy auditing on IT management systems for numerous multinational corporations and SMEs.

EDUCATION

• Bachelor of Applied Science (Computer Technology), Nanyang Technological University, Singapore, 1994
• Specialist Diploma in Cyber Security Management, Singapore Polytechnic

CERTIFICATIONS

Security & Compliance:

• PCI DSS Qualified Security Assessor (QSA)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• IRCA ISO IEC 27001:2013 Lead Auditor
• Paraben Corporation Certificate of Mobile Device Forensics

Process & Management:

• Project Management Professional (PMP)
• Certified ITIL Expert Level v3
• COBIT 5 Foundation Certification
• Certified ISO/IEC 20000
• IRCA ISO 9000:2008 Lead Auditor
• Certified ScrumMaster
• Advanced Certificate in Training and Assessment