Summary

GANBAYAR UUGANBAYAR
Cybersecurity Risk & GRC Leader | CISSP | ISO/IEC 27001 Lead Auditor | PhD

Email: ganbayar.uuganbayar@gmail.com
Mobile: +976 8902 1554
Current location: Ulaanbaatar, Mongolia
Preferred location: Sydney, Australia
Work rights: Employer sponsorship required

PROFESSIONAL SUMMARY

Cybersecurity executive, consultant and researcher with more than 13 years of international experience in cyber risk management, security governance, controls assurance, ISO/IEC 27001, SOC implementation and cybersecurity education. Led 54 cybersecurity consulting engagements for government agencies, banks, private-sector organisations and international partners, including JICA, UNDP, EBRD and GIZ. Former University of Oxford postdoctoral researcher and Rio Tinto Network and Systems Engineer. Combines executive and board-level communication with strong technical, consulting and research capabilities.

CORE CAPABILITIES

Cybersecurity governance and strategy; cyber risk assessment; security controls assurance; ISO/IEC 27001; NIST Cybersecurity Framework; CIS Controls; COBIT 2019; cyber insurance; SOC and CSIRT; incident management; vulnerability assessment; penetration testing; security auditing; threat intelligence; client advisory; project leadership; board reporting; training and mentoring.

PROFESSIONAL EXPERIENCE

Info Sec Plus — Co-Founder and Chief Executive Officer
January 2022–Present

• Led 54 cybersecurity engagements involving penetration testing, security audits, risk assessments, SOC implementation, ISO/IEC 27001 and COBIT 2019.
• Advised government agencies, banks, private companies and international organisations, including JICA, UNDP, EBRD and GIZ.
• Delivered cybersecurity awareness and training programs to 75 organisations.
• Conducted government- and UNDP-supported research into cyberbullying and public cybersecurity awareness.

Agula Insurance — Independent Board Member
March 2024–Present

• Guide IT and information security strategy, decision-making and objectives for Mongolia’s first Insurtech company.

Grow with Google — Cybersecurity Instructor
February 2024–Present

• Lead Cybersecurity Foundation programs for technical and non-technical participants.
• Taught more than 130 learners from diverse professional and age groups.

National University of Mongolia — Senior Lecturer and Contract Associate Professor
February 2022–September 2025

• Taught cybersecurity courses and led 18 applied projects covering threat intelligence, AI for intrusion detection, security gamification and network access control.
• Supervised two master’s and nine bachelor’s theses.

Government of Mongolia — Cybersecurity Consultant
May 2022–July 2022

• Researched and advised the development of Mongolia’s first National Cybersecurity Strategy, audit framework and risk assessment policies.
• Delivered 30 hours of cybersecurity training to approximately 900 government IT professionals.

University of Oxford — Postdoctoral Researcher, Cyber Security
May 2021–May 2022

• Conducted cyber-risk research through the AXIS3 project, covering Conditional Value at Risk, threat-intelligence sharing and CTF-based experimentation.
• Published research, taught Advanced Security to MSc students and supervised an MSc candidate.

National Research Council of Italy — Cybersecurity Researcher and Marie Curie Fellow
September 2016–May 2021

• Delivered the EU H2020 NeCS and CyberSure cybersecurity projects.
• Developed an online risk-assessment tool integrating ISO/IEC 27001 and the NIST Cybersecurity Framework.
• Created an optimisation approach combining cybersecurity controls and cyber insurance, receiving a best-paper award and publication in Computers & Security.

Rio Tinto — Network and Systems Engineer
January 2015–July 2015, Perth, Australia

• Implemented network-device configuration management that configured 6,000 devices in four hours, compared with eight hours for 30 devices previously.
• Completed Windows Server migrations for sites in Japan and Korea without service delays.

EDUCATION

PhD, Information and Communication Technology — University of Trento, Italy, 2021
Master’s Degree, Computer Networking — National University of Mongolia, 2014
Bachelor’s Degree, Computer Networking Engineering — National University of Mongolia, 2012

CERTIFICATIONS

CISSP
ISO/IEC 27001 Lead Auditor, PECB
Cisco Instructor

LANGUAGES

Mongolian — Native
English — Advanced
Italian — Beginner/Intermediate

Education

2017/2021 PhD at University of Trento

SKills