XU Z.

About

John XU Z. is a cybersecurity executive with over 20 years of experience in enterprise security architecture, strategic advisory, and GRC transformation. He has a proven track record of leading cyber transformations, building identity functions, and maturing GRC functions for complex, global organizations. John is seeking fractional CISO or senior cybersecurity consulting roles to help organizations accelerate their cybersecurity resilience.

Skills

• Cybersecurity Strategy & Advisory
• Enterprise & Cloud Security Architecture (SABSA / TOGAF / SAFE)
• Identity & Access Management (IGA/AM/PAM/NHIM)
• SAP Security & GRC AC (inc SAP CIS)
• Governance, Risk & Compliance (GRC)
• Board & Executive Reporting
• Zero Trust & Defence in Depth
• Security Operations & Incident Response
• Threat Modelling (STRIDE / PASTA)
• Third-Party Risk Management (TPRM)

12 skills in total

Experience

• Virtual / Fractional CISO

  Entropy Dynamics Consulting

  Mar 2026 — Present

  Melbourne, VIC

• Fonterra

  • Head of Cybersecurity Advisory

    Sep 2023 — Nov 2025

    Melbourne, VIC

  • Enterprise Security Architect

    Apr 2021 — Sep 2023

    Melbourne, VIC

7 experiences in total

Education

• HarvardX

  Cybersecurity: Managing Risk in the Information Age

  Jan 2024

• Charles Sturt University

  Graduate Certificate in Information Systems Security

  Jan 2016

3 education entries in total