The following summarizes selected responsibilities and achievements with verifiable outcomes.

[Regulatory & Partner Audit Readiness]

•  Prepared audit evidence for GCash due diligence, Lotte Shopping subcontractor inspections (2025, 2026), and the 2026 KMC CI inspection.

• Coordinated evidence collection across IS, Infra, HR, CX, and L&C; supported fintech security reviews.

[Certification Program Management]

• Internalized ISO activities previously outsourced for approx. KRW 42.5M: risk assessment, SoA, internal audit, management review.

• Coordinated 2025 ISO/IEC 27001 & 27701 surveillance audits (DQS Korea).

• Coordinated the PCI DSS v4.0.1 Level 1 assessment for Visa Direct C2C remittance, from evidence to AOC.

• Completed the PECB ISO/IEC 27001 Provisional Auditor program.

[Policy Design & Governance]

• Drafted security, privacy, cloud, and AI governance policies aligned with Korean financial regulations, PCI DSS, and ISO standards.

• Reorganized the policy framework into a policy, standard, and guide hierarchy.

• Prepared externally published Security and Privacy Statements.

• Renewed privacy liability insurance, raising coverage from KRW 200M to KRW 1B at approx. 50% lower premiums.

[AI Security & Governance]

• Established governance for enterprise use of Claude and Gemini: guardrails, usage guidelines, review procedures.

• Defined security requirements for SentGate, an internal AI-assisted security review platform.

[Security Awareness & Operational Resilience]

• Delivered company-wide security training (EN) on privacy, incident response, GenAI risks, and phishing.

• Ran GoPhish simulations including quishing and MFA bypass; issued threat and breach communications.