Jonathan Wan Partner, Financial Services

Qualifications

• MSc in Financial Management (Distinction), The University of Manchester, United Kingdom
• Master of Accounting, Monash University, Australia
• BSc (Hons) Mathematics & Computer Engineering, Queen’s University, Canada
• Chartered Accountant, Chartered Accountants Australia & New Zealand
• Fellow of CPA Australia, CPA Australia
• Certified Information Systems Auditor, Information Systems Audit & Control Association
• CSX Penetration Testing Overview (CPTO) Certificate, Information Systems Audit & Control Association
• Certified Internal Auditor, The Institute of Internal Auditors
• Certification in Risk Management Assurance, The Institute of Internal Auditors
• Certificate in Data Analytics, ACCA

Background

Jonathan joined Financial Services team of Forvis Mazars in Hong Kong in 2023. With more than 20 years of experience in corporate advisory, Jonathan obtained extensive track records in advocating senior stakeholders for a wide spectrum of local and multinational financial institutions on the establishment of their strategic & IT transformation, governance, risk & compliance (GRC), including regulator driven system reviews, and data management frameworks; as well as on the enhancement of operation effectiveness and efficiency on those programmes.

Before joining Forvis Mazars, Jonathan held roles in Big 4 firms as well as the Hong Kong Exchanges and Clearing Ltd., American Express & Marsh McLennan. Jonathan is an active contributor in the professional arena and had delivered listing requirements, GRC and Tech related speeches in seminars and training with various professional bodies.  He was a guest lecturer on corporate governance, internal controls and tech-risks for courses co-organized by the Economic Times Business College and the City University of Hong Kong.

Jonathan focused on advising financial institutes in their IT governance, risk management & compliance frameworks, the adoption on emerging technologies and digital transformation for embracing of web 3, ML and GenAI technologies). Jonathan had led the services on:

• IT compliance assessments under the Hong Kong Monetary Authority’s Supervisory Policy Manual (TM-E-1, TM-G-1, TM-G-2, SA-2, C-RAF 2.0),other related reviews on eKYC, transaction monitoring and cloud computing technologies, and IS Guideline (under the Hong Kong Deposit Protection Board) for banking institutions.
• Independent assessments for the Multiple Credit Reference Agencies membership application for credit providers covering consumer personal data privacy, data integrity and IT security controls under the requirements introduced jointly by the Hong Kong Association of Banks, the Hong Kong Association of Restricted Licence Banks and Deposit-Taking Companies, the Licensed Money Lenders Association Limited and the Hong Kong Monetary Authority.
• IT controls assessment for license corporations under the Securities and Futures Commission regime, including pre-regulator inspection assessments and ISAE 3402 reviews for asset management firms.
• Independent compliance and cybersecurity assessments (covering user application security (web-based), wallet security, physical security, network and system security (including penetration testing and vulnerability scanning) and technical review on the IT infrastructure, cloud environment and other security measures) on a crypto exchanges under the Securities and Futures Commission’s Virtual Asset Trading Platform licensing requirements.
• Cybersecurity advisory for financial institutions on implementing/ revamping NGSOC, SIEM tools, low-code platforms and on adapting blockchain solutions.