Simon Tung
About Simon Tung
Simon Tung is a Cyber Security Lead at VISTRA in Hong Kong, specializing in compliance with international data protection standards such as ISO27001, PDPO, and GDPR. He has extensive experience in cyber security resilience programs, incident response, and security monitoring.
Work at Vistra
Simon Tung serves as the Cyber Security Lead at Vistra, a position he has held since 2022. In this role, he manages various compliance programs, including those for ISO27001, PDPO, and GDPR. His responsibilities involve advising on cyber security practices and solutions, ensuring that the organization adheres to international data protection standards. Tung has successfully led cyber security resilience uplift programs across multiple industries, adapting strategies to meet diverse threat landscapes.
Education and Expertise
Simon Tung holds several professional qualifications, including CISSP, CISA, GCIA, GCFA, PMP, and CPTS. These certifications reflect his extensive knowledge and expertise in cyber security and project management. His educational background supports his proficiency in various areas of cyber security, including risk assessment, incident response, and compliance with international standards.
Background
Prior to his current role, Simon Tung served as a Data Protection Officer for a publicly listed company in Hong Kong, where he led initiatives related to GDPR compliance. His experience encompasses conducting security monitoring, systems forensics, and incident investigations, emphasizing his strong background in cyber security incident response. Tung has specialized in threat and vulnerability management, as well as third-party security.
Achievements
Throughout his career, Simon Tung has designed, deployed, and operated Security Information and Event Management (SIEM) and Security Operations Center (SOC) systems. His work demonstrates advanced skills in incident response and proactive security measures, including Data Loss Prevention (DLP), Endpoint Detection and Response (EDR), and Intrusion Prevention Systems (IPS). He has successfully adapted cyber security strategies to various industries, showcasing his ability to manage compliance and security across different environments.