Steven SIM

Steven Sim has worked for 24 years in the cybersecurity field with large end-user enterprises and critical infrastructures, undertaken global CISO role, driven security governance and management initiatives and headed incident response, security architecture, technology and operations at local, regional and global levels.

He currently leads Global OT Security Governance, Technology Management and Cybersecurity Masterplan Project Management Office. He also leads the Global Cybersecurity Incident Response and oversees CSIRTs in business units. He also leads the Group IT Security Centre of Expertise to franchise best practices to business units and has also driven cyber initiatives, developed standards, managed threats, researched vulnerabilities and promoted awareness.

Always keen to give back to the community, he also volunteers at the ISACA Singapore Chapter as the President, chairs the OT-ISAC Executive Committee and holds a Masters in Computing, CCISO, CGEIT, CRISC, CISM, CISA, CDPSE, CISSP as well as technical certifications GICSP, GREM, GCIH and GPPA. He is an APMG-accredited trainer for ISACA's core certifications and a member of both the Microsoft APAC CISO Council, Fortinet Executive Cyber Exchange (ECE), CyberEdBoard and SANS Offensive Operations Community.

He regularly shares his thoughts on cyber risk and security, lectures on an adjunct basis at National University of Singapore Institute of System Sciences, speaks and panels at international and local conferences, published articles and provided vCISO mentorship to SMES and start-ups. He is recognised in the Peerlyst 29 Highly Influential CISOs list, a Singapore SkillsFuture Fellow and a Professional (Leaders) Finalist in Singapore’s Cybersecurity Awards 2018.

Key areas of expertise and experience lie with IT Security Governance, Risk Optimisation, Compliance, Security Assessment, Incident Management, Training, Awareness. Planned and oversee deployment of solutions enabling business for large IT enterprises and critical OT infrastructure with focus on Internet of Logistics TM, CP 4.0 TM, Supply Chain 4.0 and Cyber-Physical Systems.