Cheng-Ping Li

About Cheng-Ping Li

Experienced Information Security Professional specialized in Cloud, AI/Machine Learning Security in healthcare, Medical Imaging Device IoT Security, Security Development Lifecycle (SDL), Security Strategy, Architecture, and Program Management, Threat Modeling, Quantitative Risk Assessment, Security and IAM Solution Architecture, Third Party Security Assessment, Regulatory and Compliance driven security assessment including HIPAA/HITECH, SOX, GDPR, NIST 800-53, ISO 27001, and PCI. Certified as CISSP, GIAC Certified Incident Handler (GCIH), GIAC Certified Forensics Analyst (GCFA), GIAC Web Application Penetration Tester (GWAPT), GIAC Assessing and Auditing Wireless Networks (GAWN).

Experience

1. Principal Product Security Leader

   GE HealthCare

   Aug 2014 — Present · San Francisco, CA, US

   Principal Product Cybersecurity Leader at GE HealthCare with a decade of experience overseeing the security of Cloud and AI medical products. Responsible for comprehensive security risk assessments, security development lifecycle guidance, and threat modeling in various environments including on-prem, cloud, IoT, AI/machine learning, with agile and CI/CD development frameworks. Expert in navigating cybersecurity complexities in healthcare technology, ensuring the integrity and safety of critical medical devices and systems. Leadership role in a team of cybersecurity professionals, upholding the highest standards of security in compliance with healthcare industry regulations, and contributing to the advancement of innovative healthcare technology.

Education

• University of Southern California

  Doctor of Philosophy (Ph.D.), Geophysics

• University of Southern California

  Master of Science (M.S.), Computer Engineering

Skills

• Active Directory
• Information Security
• Security Audits
• Security Development Lifecycle
• Vpn
• Business Continuity
• IT Audit
• Cisa
• Identity & Access Management (Iam)
• Disaster Recovery
• Cissp
• Computer Security
• Governance
• Vulnerability Management
• Dlp
• IT Management
• Identity Management
• Vulnerability Assessment
• Penetration Testing
• Pci Dss
• Cloud Security
• Access Control
• Firewalls
• U.s. Health Insurance Portability and Accountability Act (Hipaa)
• Information Technology
• Hipaa
• Risk Management
• Security
• Enterprise Architecture
• Payment Card Industry Data Security Standard (Pci Dss)
• Risk Assessment
• Quantitative Risk
• IT Strategy
• Threat Analysis
• Application Security
• Network Security
• Enterprise Risk Management
• Encryption
• Cobit
• Security Consulting