Güray Yılmaz

● Directed company operations in Turkey, Ukraine, and Lithuania, comprised of +150 clients and +12.000 employees. ● Managed the company’s IT budget of +€10 million/year. ● Developed long-term technology strategies. Managed the company’s digital transformation strategy, which resulted in +€5 million savings in operational costs in 2 years. ● Directed the development of the following products all of which are used in global operations: ○ TP GenAI: A generative AI product which has been subsequently adopted in 80+ countries. ○ StoryfAI: An AI-based translation tool ○ WeSupport: A cross-platform internal support tool deployed in 22 countries. ○ TPVillage: An internal employee communication and engagement platform ○ Artflow: A knowledgebase, scripting and decision-making platform ● Directed the development of the following local products and solutions such as ○ SimplyDelivery: A government integrated CRM and case management system ○ Jupiter: A corporate Intranet system ○ +10 CRM and case management systems that have been customized according to client needs. ● Reformed the company’s sales operations for digital products and solutions to implement the new strategy focusing on revenue growth. ● Managed internal data security and data privacy operations as well as procedures. Developed and implemented IT procedures and guidelines for obtaining and maintaining compliance with ISO 27001, ISO 22301, PCI DSS, and Internal-Global Regulations. ● Created a new infrastructure strategy and upgraded and renovated the physical and technical infrastructure accordingly.

● Established and implemented the Bank's security program. Managed the development, testing and implementation of appropriate security plans, products, and control techniques. ● Directed the governance and compliance of the security policy, standards, procedures, and guidelines to prevent the unauthorized use, release, modification, or destruction of data across multiple platforms and environments. ● Consulted the board and the C-suite on how to interpret technical security metrics as well as vulnerabilities and on appropriate corrective actions. ● Created and implemented a security strategy for internal operations and employee interactions with the aim of integrate security as a key component into the corporate culture. ● Communicated key information security strategies and processes; increased productivity and implemented risk mitigation strategies. ● Maintained and enhanced the Information Security risk assessment methodology by performing risk assessments of information systems and infrastructure. ● Developed appropriate risk treatment and mitigation options to address security risks identified during security reviews or audits. ● Set information security strategic direction for all technology platforms and business units.

Establishes and implement the Bank's Enterprise Architecture. ● Set strategic direction for all technology platforms. ● Maintained and enhanced the code review methodology and quality metrics. ● Developed appropriate code review plans to ensure the quality and the security of the codes. ● Supervised the development of teams to have same vision of technologies that have been implemented in multiple platforms and environments of the Bank. ● Communicated key information technology strategies and processes to the management and the stakeholders. ● Directed the improvement and customization of applications. ● Consulted the board and the C-suite on the enterprise infrastructure and sectoral developments including, but not limited to, technology standards, directions and best practices.

Assumed the overall responsibility of establishing and maintaining an organization wide information management system including information security, system and operations management and project management program to ensure end to end IT needs of Demirbank. Developed long-term technology strategies and ensured that the Bank meets all mandated standards and business needs. ● Planned and managed the IT budget. ● Reported to and advised the Board about the firm’s IT infrastructure and global developments in the field. ● Designed & developed IT Infrastructure, including network layer, server farm, security components as well as applications. ● Developed and managed the corporate and retail banking infrastructure from scratch. ● Redesigned the core banking and card operation systems and conducted the subsequent migration thereof. ● Developed IT procedures and guidelines for complying with COBIT, SOX, and internal regulations. ● Established SDLC process - tracing, optimization, and reporting procedures. ● Established IT Risk Assessment process. ● Managed Enterprise Architecture. ● Managed IT assets, impact analysis, and IT Change Management Process.

* Managing and developing Alternative Channel applications. * Microsoft .Net Framework and ININ Framework based Call Center Solution (CTI, SoftPhone, IVR modules) is developed with SOA architecture and fully integrated to Core Banking. * Mobile Internet Banking solution is developed based on Microsoft .Net Mobile Forms. * SMS Banking solution is developed based on Microsoft .Net Framework, Turkcell SMS Gateway and SQL Server Service Broker with supporting Queuing

* Designed and developed MyNet toolbar for allowing users to access to all MyNet Services (Like Yahoo, Google Toolbar). * SMS service is developed for incoming and outgoing SMS transactions including payment over SMS transactions. * ICQ integration solution is developed in scope of ICQ Extras, User Integrations/Exchanging, and SMS Integration.

* Smart Client B2B solution is developed with Microsoft .Net Framework and integrated to Logo ERP System. * Various B2C and Corporate Web Site development with Microsoft ASP.Net * Microsoft Outlook integrated communication platform is developed based on HTML, JavaScript, and Microsoft Outlook object model.