Michael Pang

Michael is a managing director with over 20 years’ experience. He is the IT consulting practice leader for Protiviti Hong Kong and Mainland China. His experience covers cybersecurity, data privacy protection, IT strategy, IT organisation transformation, IT risk, post-merger integration and operation improvement. Before joining Protiviti, Michael has taken key consulting roles at Boston Consulting Group, A.T. Kearney and Kodak Services for Business.

Major projects

• Led a large number of security assessment and audits for ISO 27001, PCI DSS and NIST cybersecurity framework 
• Assisted many HK and US listed companies in assessing and improving the cybersecurity and IT security governance 
• Led a number of financial institutions (including asset management firm and insurance firms) for IT security compliance projects 
• Advised multiple international hospitality and hotel groups on cybersecurity protection, security incident respond and data privacy issues 
• Advised the China subsidiary of an international coffee brand on the security assessment and remediation effort, including the establishing of the security operations 
• Led a number of data privacy impact assessment projects for IT system implementation for various departments of the Hong Kong Government 
• Led a large number of technical security assessment exercise, including penetration test, vulnerability scan, phishing testing and source code review 
• Led a number of audit and advisory projects helping clients in establishing risk management function as well as managing risks (especially technology risks) 
• Experience in helping a number of banking and insurance firm in IT transformation as well as information protection/security 
• Led the overall IT audit effort for 2 universities in Hong Kong on data security/privacy, IT governance and operational effectiveness 
• Conducted a number of public speaking, awareness training and corporate educations on cybersecurity and IT security topics

Areas of expertise

• Cybersecurity 
• Data privacy 
• Technology risk and IT audit 
• IT strategy

Industry expertise

• Banking and Insurance 
• Public Sector 
• Retail

Education

• Bachelor of Engineering & Bachelor of Science - University of Melbourne, Australia 
• Master of Business Administration - New York University

Professional memberships and certifications

• ITIL Foundation 
• Certified Information Systems Auditor (CISA) 
• Project Management Professional (PMP)