Kuala LumpurSince 2008
Hassan
Basri
Loading0%
X = 3.14°NCurriculum vitae / 2026Y = 101.69°E

Senior Information Security Leader & AI Systems Builder

Governing multi-market AI security baselines, zero trust infrastructure, and autonomous systems with hands.

01Practice

Enterprise AI Security

Governs enterprise AI policy, model evaluation, and runtime guardrails across 18 APAC markets.

  • Mandatory AI Security Standard across 18 APAC markets (NIST AI 600-1, OWASP AISVS L1–L3)
  • Non-Human Identity (NHI) governance & zero standing privilege runtime control plane
  • Shadow AI discovery, prompt firewall enforcement, and automated DLP sanitization
02Practice

Zero Trust & DevSecOps

Architects identity-centric perimeters, ephemeral access, and automated CI/CD security gates.

  • Zscaler ZPA deployment retiring legacy corporate VPN across APAC
  • Just-In-Time (JIT) privileged access eliminating standing administrative rights
  • Automated SAST/DAST CI/CD security gates & Bank Negara Malaysia (BNM) RMiT alignment
03Practice

Autonomous AI & Systems

Builds autonomous agents with hands, distributed edge state, and low-level device engineering.

  • Jarvis: solo-engineered offline GPU voice AI with native Windows ctypes automation
  • Cloudflare Workers & Durable Objects distributed state coordination
  • 1st Prize Winner, Maybank Wearable Hackathon & native Android camera pipelines
01

Profile

Senior Information Security Leader & Enterprise Security Architect governing AI/ML security strategy across 18 APAC operating markets at AIA Group in Kuala Lumpur. Architect of defense-in-depth AI baselines (NIST AI 600-1, OWASP AISVS, BNM RMiT, CSA Agentic Trust). Prolific hands-on systems builder of local autonomous AI agents (Jarvis), edge distributed actor state (Cloudflare Workers & Durable Objects), and 1st Prize Winner at the Maybank Wearable Hackathon.

18 APAC Markets

AIA Group InfoSec

Enterprise AI Security Standard, multi-lens threat models (STRIDE, NIST, ATLAS), and Shadow AI containment.

Agentic Trust

Non-Human Identity

Runtime governance, OAuth 2.1 scoped delegation, and zero standing privilege for autonomous AI agents.

Solo Builder / GPU

Jarvis Local Voice AI

Zero-cloud local voice assistant running on GPU with faster-whisper, OmniVoice, and OS ctypes automation.

Fintech Innovation

Maybank Hackathon

1st Prize Winner for wearable fintech & contactless payment systems; Bank Negara Malaysia RMiT compliance.

02

Career

2008 — 2026

Each bar is one role, drawn to scale by month. The hatched band marks the years in Kuala Lumpur.

Fig. 1 / Roles over timeDrawn to scale by month
03

Shift

What each role asked for

How much of each kind of work every role carried, from foundational systems to AIA Group. Read top to bottom: architecture stays constant, hands-on engineering gives way to team building, then to client delivery and AI adoption. Select a bar to read the CV points behind it.

LowMediumHighNot a focus
04

Experience

2008 — 2026
05

Engagements

AIA Group / 2026

Enterprise clients in banking, manufacturing, pharma and hospitality. Client names are withheld. Hover or tap a node to trace its line.

Fig. 3 / Engagement map12 engagements / 12 shown / 3 solution areas
06

AI Defense

2024 — 2026

Enterprise AI Defense-in-Depth Architecture. Enterprise Security Architect. Five-layer security architecture governing foundation models & autonomous agents across 18 APAC markets.

Components named in the project, shown along the data flow. Select a component for its detail.

Fig. 4 / Data flowEnterprise AI Security Standard (18 Markets) / NIST AI 600-1 & OWASP AISVS
07

Projects

2017 — 2026
08

Other

Competencies
Enterprise AI Security Strategy, Non-Human Identity (NHI) Governance, Zero Trust Architecture (ZTNA), Threat Modeling (STRIDE, NIST AI 600-1, MITRE ATLAS), DevSecOps & CI/CD Security Gates, Central Bank Compliance (BNM RMiT, PayNet, MAS SAFR), Distributed Systems Architecture, Low-Level Driver & OS Automation.
Tech Stack
Python, TypeScript, Go, C# / .NET, Rust, Java, Kotlin, Bash, Cloudflare Workers & Durable Objects, Zscaler ZPA, LiteLLM, AWS (Bedrock, Lambda, KMS), Docker, Kubernetes, Linux, Windows user32 / ctypes, WebRTC, Camera2 API, PostgreSQL, Redis.
Standards & Frameworks
NIST AI 600-1 / AI 100-1, OWASP LLM Top 10 (2025), OWASP AISVS 1.0, CSA Agentic Trust Framework (ATF 2026), Bank Negara Malaysia RMiT (Nov 2025), PayNet Rules, Singapore IMDA Model AI Governance, Hong Kong PCPD AI Framework.
Honors
Maybank Wearable Hackathon — 1st Prize Winner (Contactless wearable payment systems & fintech innovation).
Languages
English (Full professional proficiency), Malay (Native), Indonesian (Fluent).
Interests
Autonomous AI agents, local speech models, robotics, smart home automation, family road trips, outdoor sports.
Email copied to clipboard