RUI ZHOU

Dedicated Operational risk manager with over 10 years of experience in IT Resiliance and Change Management, Risk Advisory within internal and external IT Audit (GITC, InfoSec, DevOps), Assurance(RCSA), Compliance (REP018,CQUEST,PCI-DSS), Governance (GRC SteerCo/Forum/TOR), and Reporting (Actions/Incidents status report/committee paper) realms. My experience demonstrates expertise in orchestrating transformational oversight across the three lines of defence, and adept in driving large-scale IT migration projects to fruition. Also, I am a collaborative leader known for forgoing strong relationships with senior stakeholders and steering high-performing teams.

Proficient in enhancing risk frameworks with regards to COBIT/NIST/ISO 27001 standards, conducting thorough inherent and residual risk assessments, and adeptly planning and mapping RCSA. My tenure has witnessed the successful migration of legacy systems to cloud infrastructures, ensuring robust remediation, diligent oversight of actions, and the annual refreshment of Divisional/Group policies and standards. Skilled in Risk Event management, I excel in crafting risk acceptance narratives and thorough in conducting issue deep dives to ensure meticulous issue closure packages. Holding internationally recognized certifications in CISA, ITIL, and Prince2, I bring a rigorous analytical lens to technology risk management and transformation oversight. I am currently finalizing my CIMA qualification, further fortifying my financial acumen.

Proficient in enhancing risk frameworks with regards to COBIT/NIST/ISO 27001 standards, conducting thorough inherent and residual risk assessments, and adeptly planning and mapping RCSA. My tenure has witnessed the successful migration of legacy systems to cloud infrastructures, ensuring robust remediation, diligent oversight of actions, and the annual refreshment of Divisional/Group policies and standards. Skilled in Risk Event management, I excel in crafting risk acceptance narratives and thorough in conducting issue deep dives to ensure meticulous issue closure packages. Holding internationally recognized certifications in CISA, ITIL, and Prince2, I bring a rigorous analytical lens to technology risk management and transformation oversight. I am currently finalizing my CIMA qualification, further fortifying my financial acumen.

MSc in Nottingham University