Tony Poon

Principle Engineer, Information Security Officer @Fibrogen, Inc

San Francisco, CA, US

Managed Cyber Security Program, Information Security Risk Management, Threat and Vulnerability Management (TVM) program, and InfoSec daily operations and projects.Notable Accomplishments:Built an Information Security program with policies, procedures, and standards.Information Security Policy, Information Classification Policy, Data Retention Policy, Acceptable Use Policy, Incident Response Policy, Email Policy, Encryption PolicyImplemented identity protection-Single Sign-On (SSO) and multiple Factor Authentication (MFA).Applied email protection-DMARC, SPAM/Phishing, and Business Email Compromise (BEC) protecion.Implemented network access protection - VPN, VLAN, Geo restriction, segmentation, endpoint protection - MDM, EDR, DR/BCP, vulnerability scanning, patching, and CM.Oversaw data and Intellectual Property protection - DLP, MDM, geo-restriction, RBAC, OTP, classification, and insurance.Conducted risk assessment, penetration testing, and internal audit.Prepared ISO/27001 certification.

SANS - GIAC

GCIH, GIAC Certified Incident Handler

ISACA - Information Systems Audit & Control Association

CISM, Certified Information Security Manager

ISACA - Information Systems Audit & Control Association

CGEIT, Certified in the Governance of Enterprise IT

SANS - GIAC

GAWN, GIAC Accessing & Securing Wireless Networks

ISACA - Information Systems Audit & Control Association

CISA, Certified Information Systems Auditor

Microsoft

MCSE, Microsoft Certified Systems Engineer

Novell Netware

MCNE, Master Degree, Certified Network Engineer

ISC2 - CISSP

CISSP, Certification for Information System Security Professional

SANS - GIAC

GSNA, GIAC Systems & Network Auditor

Cisco

CCNA, Cisco Certified Network Associate

ISC2 - CCSP

CCSP, Certified Cloud Security Professional