Tse Wen Chan

DPO Data Protection Officer / CyberSecurity Deputy Manager

Talent

SingaporeMember since April 21, 2026

cybersecurity

Hire this person

Send a job offer directly to this candidate

cybersecurity

About

I am currently working in MSI Global, subsidiary of Land Transport Authority as a Data Protection Officer / Cyber Security Deputy Manager and previously Central Provident Fund Board as a Principal consultant /Technical Deputy Director for Cyber Security Incident Management leading a team to perform cyber security incident escalation and handling to promote communication, response among CPFB CyberOps, CPFB Information Security Group, and GOVTECH (CWC, GITSIR).

Previously I worked at Infocomm Development Authority of Singapore as a Lead consultant for Government IT Security Operations for 2 years 8 months conducting security penetration testing and vulnerability scanning for whole of government online (CAGE), project managing secured communications project for IDA secure mobile communication. Prior to this, I was working at Land Transport Authority for 4 years and my current position is a subject method expert for security framework on the Next Generation Road Pricing ERP2 conducting system tests on the System Evaluation Test / Trial in Tuas South Avenue. My work includes project managing the security consultants from DSO, ASTAR, DSTA and ISD(MHA), participating in the final tender on the security framework of ERP2.

Apart from working in the public sector, I was working in Renesas Systems Solutions Asia Pte Ltd (Previously known as Hitachi Micro Systems Asia Pte Ltd) as an Assistant Principal Engineer for 7 years and 6 months developing embedded encryption/ decryption middleware, software / GUI for application development tool, data management and systems integration. Then after, I was recruited by CCT-Tech Pte Ltd (China Communication and Telecoms) as a Senior Project Lead (Software) to manage 2 software teams on building DECT phones for customers like Philips, Siemens, British Telecom and Thomson. Hence, my work experience would be 16 years 3 months in total coming to this end of December 2012.

I’m very organized and also a self-motivated worker, I also enjoy working as a team player. Working in the ERP2 project and the semiconductor industry has been an enriching experience to me as the number of technologies I was exposed to help to build my technical background & foundation.

This variation of different technology field has opened my mind and brought enthusiasm to my attitude in learning and researching. Nevertheless, as my experience grew, I was also given opportunities to do project management, customer support, conduct and implement many onsite customer training and job improvement related activities besides development work, testing and programming.

If my work experience is what you require, I hope to hear from you soon. My contact information is as stated in the personal profile below, and you can reach me through phone or mail. Thank you for your time and consideration.

Experience

MSI Global Pte Ltd (Mar 2021 – Present)

Deputy Manager | 4 Years 6 Months

Led migration of on-premises systems to AWS Cloud for the EZ-Link (EZCM) project, including design, implementation, configuration, and validation of AWS services and third-party security tools
Designed and enforced security controls, system configurations, and technical documentation aligned with best practices
Provided security operations support, including VAPT, system hardening, and governance
Facilitated compliance initiatives (ISO 27001, PDPA, internal audits)
Operated SIEM (IBM QRadar) for threat detection and incident response
Contributed to tender bids, including solution design, risk assessments, and technical specifications
Bridged security and IT operations, ensuring alignment between infrastructure, applications, and security requirements

Central Provident Fund Board (Jun 2017 – Feb 2021)

Principal Consultant – Cyber Security Incident Management | 3 Years 9 Months

Led cybersecurity incident escalation, response, and coordination across multiple government teams (GITSIR, Cyber Ops, CWC)
Managed malware incidents, investigation processes, and cross-department communications
Developed procedures for personal data breach and IT asset loss incidents
Delivered threat analysis and advisory, including alert dissemination and coordination with GovTech
Spearheaded EDR implementation, including:
- Evaluation of 15 vendors
- Authoring tender specifications and contract conditions
- Full deployment and operationalization
Participated in POCs for UEBA, DLP, and data lake solutions

GovTech / Infocomm Development Authority (Sep 2014 – May 2017)

Lead Security Consultant – VAPT Operations & Incident Management | 2 Years 8 Months

Managed secured mobile platform project, including stakeholder engagement and solution evaluation (TreeBox, Microsoft Lync, etc.)
Led penetration testing and vulnerability scanning (CAGE program) across government agencies
Produced audit reports, validated remediation, and improved testing processes
Evaluated secure data storage solutions and coordinated with stakeholders including DSO
Managed policy and compliance initiatives, including national-level security program updates

Land Transport Authority (Jun 2010 – Aug 2014)

SME – Security Subject Matter Expert | 4 Years

Served as Security SME for ERP2 (satellite-based road pricing system)
Led PKI architecture design and security framework development
Authored tender specifications for ERP2 Security Evaluation Test (SET)
Managed multi-agency stakeholders (DSTA, A*STAR, DSO)
Led evaluation and testing across system readiness, integration, and reliability phases
Directed consortia design and tender evaluation processes

TPG Telecom Pte Ltd (Mar 2008 – Feb 2010)

Senior Security Specialist | 2 Years

Conducted security audits, compliance checks, and risk assessments (ISO 27001, PCI-DSS)
Managed incident response, investigation, and playbook development
Performed VAPT activities, including remediation validation
Built and operated SOC capabilities, including:
- SIEM (Graylog) implementation
- Threat monitoring automation
- Anti-DDoS setup and log monitoring
Delivered security governance, awareness training, and regulatory compliance support

Core Expertise

Cloud Security (AWS)
Cybersecurity Incident Management
SIEM & SOC Operations
Vulnerability Assessment & Penetration Testing (VAPT)
Security Architecture & PKI Design
Compliance (ISO 27001, PDPA, PCI-DSS, NIST)
Tender & Solution Design
Security Governance & Risk Management

Key Strength

Proven ability to bridge technical security, operations, and business requirements, with strong experience in government-scale systems, compliance-driven environments, and complex multi-stakeholder projects.

Education

EDUCATIONAL QUALIFICATION

1997 – 2000 : University of Arizona.

Bachelor of Science in Computer Engineering

Minor in Computer Science

1993 – 1996 : Singapore Polytechnic

Diploma in Electronics, Computer & Communication Engineering

1989 – 1992 : Saint Nicholas Girls’ School

GCE O-Level

1983 – 1988 : Saint Nicholas Girls’ School

PSLE

CERTIFICATIONS

Year of Certificate

Name of Certificate

Remark

2008

Microsoft Certified Professional

This certification was geared toward professional developers who were interested in expanding their knowledge of web services on Microsoft .NET Framework 1.0 and 1.1 and Microsoft Visual Studio .NET.

2009