Winnie Phung, CPA

Executive summary

Winnie Phung is a Partner in BDO Canada’s Third Party Assurance practice, with over 15 years of experience in risk, governance, and assurance services. She specializes in SOC 1 and SOC 2 reporting, as well as ISO 27001 and ISO 42001 readiness, implementation, and certification support. Winnie helps organizations establish secure, compliant, and well-governed control environments, ensuring alignment with industry standards and regulatory requirements.

Winnie leads complex SOC 1 and SOC 2 assurance programs for clients in financial services, technology, and SaaS industries. She provides guidance on control design, operational effectiveness testing, and reporting under assurance standards. Winnie works closely with fast-growing SaaS providers, technology innovators, and large enterprises to develop and enhance information security programs that meet industry expectations and support business growth.

With over a decade of experience in the banking industry, Winnie has a deep understanding of regulatory requirements and control environments specific to financial services. She is dedicated to building strong client relationships and delivering high-quality results through collaboration, transparency, and a practical approach. Her commitment to excellence makes her a trusted advisor to organizations navigating today’s complex compliance landscape.

Beyond her professional work, she serves as a board member for the Markham Public Library and is an active volunteer at Ascend Canada, where she supports diversity, equity, and inclusion (DEI) initiatives focused on advancing Pan-Asian professionals, fostering inclusive leadership, and strengthening community engagement and mentorship opportunities.

Professional affiliations

Professional designations and education