Cybersecurity in Finance: A Shared Responsibility

Speakers

• 

  Vikrant Paul Cybersecurity Manager, City of Melbourne
  

  Vikrant Paul

  Cybersecurity Manager, City of Melbourne

  Vikrant Paul is a cybersecurity professional with over nine years of experience in IT, including five years in cybersecurity focused on strategy, risk, and compliance.

  Holding CISSP and CRISC certifications, he supports enterprise security programs aligned with Essential Eight, VPDSS, and ISO 27001.

  Vikrant has contributed to cyber uplift initiatives, policy development, and the implementation of layered security controls across varied environments, working closely with business leaders to ensure alignment with organisational goals.

• 

  Wei Keen Yong Senior Manager – Technology Risk & Cybersecurity, Scyne Advisory
  

  Wei Keen Yong

  Senior Manager – Technology Risk & Cybersecurity, Scyne Advisory

  Wei is an experienced management consultant with over a decade of expertise in technology risk and cybersecurity. As the internal audit partner for the City of Melbourne, Wei leads risk mitigation and resilience projects that help councils and local government organisations strengthen their defences in an evolving threat landscape.
  With a strong advisory and assurance background, Wei Keen is passionate about helping clients rethink their approach to cybersecurity, compliance, and enterprise risk management—always with a focus on driving value and growth. He has supported clients across government, financial services, education, health, mining, and retail, guiding them through risk assessments, control design, strategy, governance, and implementation.
  In this session, Wei will co-present with Vikrant (Cyber Security Manager, City of Melbourne) to explore why cybersecurity in finance is a shared responsibility, drawing on both their experiences with local government and the City of Melbourne. They will cover practical insights into the current cyber risk landscape for finance professionals, highlight emerging threats such as email scams and AI deepfakes, and discuss key standards like PCI-DSS and VPDSS. Attendees will gain actionable strategies to help their councils build stronger cyber capability and resilience.