Barry Lo

IT Risk Governance Manager • Regional Governance & Criticality Framework: Defined the methodology and led the execution for identifying critical branch systems across 11 APAC countries, ensuring a unified regional approach to risk prioritization. • Audit & Issue Oversight: Exercise full oversight of branch IT risks, issues, and audit findings; proactively manage the remediation lifecycle to ensure timely closure of internal and external audit points. • Independent Assessment Coordination: Directed the independent IT assessment for a core banking system migration, managing external assessors to validate technical controls and regulatory readiness without compromising the project’s independence. • Compliance & Outsourcing Risk: Manage IT Outsourcing (ITO) risk assessments and regulatory compliance frameworks, serving as the primary lead for external regulatory audits and internal reviews. • Operational Risk Controls: Collaborate with regional teams on vulnerability management, configuration standards, and regular system risk evaluations to maintain the branch’s security posture. • Talent Development: Provide structured mentorship and technical training to New Joiners and Management Trainees, building a pipeline of risk-aware IT professionals.

Information System Division Management Trainee Oct 17 - Apr 18 ISD - AML Application • Assisted in daily maintenance of AML name screening system • Troubleshoot production error • Managed system automation project from Design, SIT, UAT to production launch • Managed SSIS server migration/upgrade project • Communicated with system vendor to solve system bugs • Assisted with team and department administrative tasks Manager May - Oct 18 eBanking - Mobile • Participated in mobile app upgrade UAT and QC o Communicated with developer to ensure result meets expectation • Performed user side project management for OpenAPI project • Arranged and facilitated communication with users to meet project deadline and achieve project objective • Performed QC for mobile app language translation Manager Nov 18 - July 19 ISD - EIS/MIS • Handled procurement process for EIS/MIS team o Prepared materials and presented to procurement panel members • Prepared PMO documentations (in both English and Traditional Chinese) o Prepared materials to get budget approval from Finance department and Management o Helped in completing service request received from users involving system design and database table update AVP July 19 - current ISD - Technology Risk Management

• Established and managed new MIS department to remedy lack of managerial reports; gathered requirements from management and sales team of 10+ people, collaborated with IT staff to redesign and update reports format, audited and cleaned up over 10k lines of transactions, convinced and trained 3 secretaries to use new reporting method; reduced time to generate new reports from 3 days to 0.5 day, provide CEO with management reports with increased clarity, flexibility, and data validity • Participated in business meetings alongside CEO to reach agreement with company partners; helped translating and conveying CEO’s message and avoided lawsuit as result • Negotiated with supplier to secure better cash flow for project by over RMB 23K per month for 4 months

• Designed and developed Excel tools to increase work efficiency of project managers in quotation process, shortened time needed for calculating optimal labor hours and cost from 1 working day to 30 mins • Programmed enhancement functions by writing Excel Macros using VBA to proposal report; automatized repetitive and mundane tasks, decreased formatting time by 50-60%