Thomas Kung
Principal Consultant
Navigate complex cyber threats with Thomas Kung, a CSO30 ASEAN award-winning CISO and Chief Risk Compliance Officer. With over a decade of leadership at high-growth fintech and digital asset pioneers like Crypto.com and Rakkar Digital, he is a recognized leader in securing the future of finance.
His core strength is a rare, potent hybrid of expertise. In the high-stakes world of digital assets—where technical, legal, and financial risk are inseparable—Thomas is uniquely positioned to address this convergence. He translates deep technical security (CISSP, CCSP), complex legal and data privacy (LLB, CIPP/E, FIP), and financial risk (FRM) knowledge into a single, unified strategy. He moves beyond siloed advice to deliver holistic, GRC-driven solutions that protect your entire enterprise.
Specializing in highly regulated environments, Thomas provides expert risk advisory and management consultancy covering the full spectrum of defense. His expertise is sought for building institutional-grade, "bank-grade" security frameworks for digital asset custody and financial services. This includes comprehensive security risk assessments, data-centric privacy impact assessments (PIA), designing multi-layered threat hunting and vulnerability management programs, and building robust incident response and digital forensic capabilities.
Thomas’s background in technology consulting at global firms provides a practical, real-world foundation for solution implementation. He doesn't just identify problems; he builds the governance programs, writes the policies, and architects the technical controls to solve them, ensuring compliance with complex frameworks like MAS, GDPR, and ISO 27001.
His approach is not just defensive; it is a business enabler. By mastering risk, he empowers organizations to innovate and scale securely. Choose Thomas Kung to build a resilient, compliant, and truly secure enterprise framework. Enable your innovation and protect your assets from the ground up with a strategist who has defined security at the very edge of Web3.