Technology Risk & Cybersecurity

Soven Chan

Assessing IT controls with the insight of an engineer who builds them.

About Me

I'm a final-year Computer Science student at the University of London, specialising in Machine Learning and Artificial Intelligence.

As a software engineer, I independently built secure, AI-native enterprise SaaS products used in production by enterprise clients.

At Deloitte, I moved to the other side, testing IT controls for banks and technology companies in assurance engagements. Having both built systems and assessed them, I see security from both perspectives.

I'm particularly drawn to cybersecurity because recent advances in AI are making attacks faster, cheaper, and more convincing, and the threat landscape is growing with them.

Location

Singapore

Focus

Cybersecurity & AI

Current Grade

/ 100

Experience

Audit & Assurance - IT Controls Intern (Third-Party Assurance)

Deloitte

Sep 2026 - Dec 2026

Supported IT controls assurance engagements for financial services and technology clients.

  • Performed testing of ITGC, ELC, and SLC for ISAE 3402 and ABS OSPAR v2.0 assurance engagements
  • Supported 5 engagements across financial services and technology clients, including a global bank, a regional commercial bank, core-banking and wealth-tech software providers, and a multinational technology company
  • Conducted on-site client visits to walk through policies and procedures, inspect evidence, and assess the design and operating effectiveness of controls
ITGCISAE 3402ABS OSPAR v2.0IT AuditControls Testing

Software Engineer

NetGain Systems

Oct 2025 - Sep 2026

Started as a full-time internship undertaken concurrently with full-time studies, then continued into an ongoing engineering role. Independently built the AI-powered and SaaS, followed by , a multi-site energy management platform, all deployed in production and actively used by enterprise clients.

  • Independently drove product strategy from the ground up, conducted competitor analysis, researched ITSM and ITAM industry standards, and defined product requirements end-to-end with full ownership from concept through production deployment
  • Architected and implemented secure backend systems with robust authentication and authorization, data encryption, API hardening, and abuse prevention mechanisms aligned with enterprise security best practices
  • Developed full-stack architecture and implemented Retrieval-Augmented Generation (RAG) pipelines to automatically resolve support tickets using vector search and LLM orchestration
  • Built a multi-site energy monitoring platform for an APAC colocation data-center operator, ingesting MQTT telemetry from heterogeneous building management systems and normalizing inconsistent vendor point names, units, and alarm conventions into a single canonical model
  • Engineered the real-time data path end to end, from MongoDB time-series storage with rolled-up query tiers and a selector-based alarm engine through to a Three.js digital twin and an agentic AI operations copilot that answers questions over live site data
  • Conducted live product demos for prospective clients and provided direct customer support, serving as a primary point of contact for enterprise users
ReactNode.jsRAGVector SearchLLMMQTTTime-Series DataThree.jsREST APIs

Engineer (Intern)

Innovative Energy Systems and Technology

Oct 2020 - Feb 2021

Contributed to network infrastructure for critical systems during the COVID-19 pandemic.

  • Worked with routers and switches to provide stable network connectivity for a COVID-19 quarantine tracking system
  • Conducted field testing of gateway devices, assessing signal range, reliability, and coverage
NetworkingRouters & SwitchesGateway DevicesField Testing

Projects

StackView (Energy Management System)

In Production
View details

Multi-site energy management and data-center operations platform for an APAC colocation data-center operator. Sits above three different vendor building management systems, normalizes their MQTT telemetry into one canonical model, and layers real-time monitoring, ISA-18.2 alarming, a 3D digital twin, and an agentic AI ops copilot on top. Running in production on Azure AKS.

ReactNode.jsMQTTTime-Series DataThree.jsSocket.IOAzure AKS

AI-Powered Service Desk

In Production
View details

Full-stack ITSM platform with AI-powered ticket resolution using RAG and vector search. Features multi-tenant architecture, SLA management, email integration, customer portal, and Azure AD SSO. Deployed in production at NetGain Systems.

ReactNode.jsMongoDBRAGLangChainREST APIs

IT Asset Management Platform

In Production
View details

Comprehensive IT asset management SaaS built from the ground up with secure backend architecture. Features robust authorization controls, encrypted data handling, and enterprise-grade security best practices.

Full-StackAuthenticationEncryptionAPI Security

Skills

IT Audit & Assurance

ITGC TestingELC & SLC TestingISAE 3402ABS OSPAR v2.0Control Design & Operating EffectivenessEvidence InspectionProcess WalkthroughsThird-Party Assurance

Security

Authentication & AuthorizationOAuth 2.0 & SSORBACAPI HardeningData EncryptionAbuse PreventionNetwork Security

Languages

JavaScriptTypeScriptPythonGoSQLHTML/CSS

Frameworks & Libraries

ReactNext.jsNode.jsExpressMongooseViteSocket.IOThree.jsD3.jsRechartsReact Flowi18nextTailwind CSS

AI & Machine Learning

RAG PipelinesVector SearchLLM OrchestrationAgentic Tool CallingLangChainOpenAI APINLPNeural Networks

Databases & Infrastructure

MongoDBSQL DatabasesTime-Series DataMQTTDockerKubernetesHelmAzure AKSGitHub ActionsGitREST APIsCross-Platform PackagingSaaS DeploymentNetworking

Concepts

Full-Stack ArchitectureMulti-Tenant ArchitectureEvent-Driven ArchitectureReal-Time Data PipelinesEdge ComputingCI/CD PipelinesAgentless DiscoverySecure Software DevelopmentObject-Oriented ProgrammingAlgorithms & Data Structures

Education

Bachelor of Science in Computer Science

Machine Learning and Artificial Intelligence

University of London

Oct 2023 - Apr 2027

Undergraduate

IRAS Book Prize (Gold)First Class Honours

Diploma in Engineering Systems

Singapore Polytechnic

Apr 2018 - Mar 2021

Get in Touch

Got a question, an opportunity, or just want to connect? Drop me a message.