Chao is a senior manager in Ernst & Young Technology Consulting Beijing specializing in cybersecurity and privacy compliance. He is proficient in security governance, security management, privacy compliance and security operation.
Chao worked in a leading international IT company, as a technical engineer. He is familiar with the IT solutions about asset management, terminal management, identity management and other security software.

Chao has extensive experience working in multiple industries including internet, high-tech and automotive. He led team to provide professional services regarding to the areas of risk assessment, cyber strategy, security management system development, security operations and cyber-tech improvement etc.

Chao has many years experience on privacy compliance and data security area and familiar with latest compliance topics. He has delivered projects for industry-leading enterprises, from identifying personal information and confidential data from business processes, analyzing the risk and potential impact and designing the data compliance strategy and policy through date lifecycle. As also, he is familiar with PIAs, PbD, APP data compliance, data cross-border transfer solution and so on.

Meg is a manager of cyber security service line in EY, Beijing, and she has five years work experience in IT field. Meanwhile, she also graduated from Northeastern University with the master degree in Information Security in U.S..
Meg participates in may projects such as SLC, privacy compliance, information security planning, information security system construction, information security audit, penetration testing service, network security inspection, IT operation and maintenance service consultation, network security law compliance consultation.
Her clients include large enterprise groups and multinational companies. The service industries include insurance, finance, internet, automobile, etc.
Meg has participated in and led the construction of information security management system, network security law compliance consulting services and other related projects in many well-known enterprises.


Meg has worked as a core member in a ISO 27000 project for a famous virtual currency transaction agency, responsible for interview leading, gap analysis, documentation refinement.
Meg has worked as a core member in a KPI design project for a famous automotive company, responsible for KPI design and quarterly KPI updating.
Meg has worked as a core member in a SDLC project for a famous global food company, responsible for business impact assessment, privacy impact assessment, pre-security assessment and reviewing penetration test reports.
Meg has worked as a core member in a GDPR compliance project for a famous global internet company, responsible for personal information audit, privacy design, compliance gap analysis, and privacy statements and relative documents review and revision.
Meg has worked as a core member in a GDPR compliance project for a famous global mobile phone company, responsible for privacy checklist, personal information data flow and risk map audit, DPIA, privacy statements and relative documents review and revision and Austria audit resource coordination.
Meg has worked as a key team member in a PMO project for a famous global automobile company, responsible for project management, including organizing alignment meeting and integrating security assessment steps in souring process.