#WorkinginCSA: Building Trust Through Cybersecurity Certification

1. Tell us more about your team’s work and your role as a Senior Consultant in CCC. 

My team develops and implements cybersecurity certification and labelling schemes that provide assurance that products meet recognised cybersecurity requirements. These includethe Cybersecurity Labelling Scheme (CLS) and Common Criteria certification. 

My work covers a range of areas, from technical security evaluations, vulnerability assessment, refinement of cybersecurity requirements, and collaboration with industry and international partners. I am particularly interested in software and hardware security, and in exploring how automation and AI can make cybersecurity assurance more efficient and scalable.

2. What inspired you to become interested in pursuing a career in this field? 

I studied Electrical Engineering and Information Technology (EEIT) at the Technical University of Munich (TUM), in partnership with the Singapore Institute of Technology (SIT). Cybersecurity was not a career path I had initially planned to pursue. After my first job, I realised that I was looking for a role that would challenge me and offer more opportunities for continuous learning. As I explored different career paths, I came across cybersecurity almost by chance. 

What drew me to the field was how quickly it evolves. As new technologies emerge, so do new vulnerabilities and threats, which means there is always something new to learn and a new problem to solve. What began as an unexpected career move has since grown into a field that I find both intellectually challenging and rewarding. 

3. What are some projects you’ve worked on in CSA that you found particularly interesting? 

Engagement with Italian National Cybersecurity Agency (ACN)

Attachment with Germany’s Federal Office for Information Security (BSI)

One project I found particularly meaningful was CSA’s collaboration with Google on Enhanced Fraud Protection (EFP), which helps combat mobile malware-enabled scams by blocking potentially risky applications. It was rewarding to see the initiative grow from a pilot in Singapore into a solution that has made a tangible impact and expanded to other countries. 

More recently, during an attachment with Germany’s Federal Office for Information Security (BSI), I had the opportunity to explore the use of Open Security Controls Assessment Language (OSCAL) to enable machine-processable documentation for automation of cybersecurity and market surveillance. I also exchanged ideas and perspectives with international counterparts including Italian National Cybersecurity Agency (ACN), the French Cybersecurity Agency (ANSSI), the European Union Agency for Cybersecurity (ENISA), and the National Institute of Standards and Technology (NIST).  

These experiences reinforced the importance of continuously evolving cybersecurity approaches to keep pace with changing technologies and threats. 

4. Outside of work, do you have any hobbies and interests? How do you unwind from work? 

Outside of work, I enjoy giving back to the community and developing myself in new areas. I volunteer with my local community, where I occasionally help organise events and activities for seniors. I find it meaningful to interact with them, hear their stories and create opportunities for them to stay engaged and connected with the community. 

More recently, I have also been pursuing International Coaching Federation's Associate Certified Coach (ICF-ACC) certification as a coach. I see coaching as an opportunity to develop my ability to listen, ask meaningful questions and support others in achieving their goals. Both volunteering and coaching allow me to connect with people from different walks of life, while strengthening communication and interpersonal skills that are also valuable in my professional life.