Demian Lopes.

Technology Operations & Governance LeaderBritish Columbia, Canada

I make technology risk governable.

I lead technology operations, security compliance and AI governance for a digital banking platform serving 15+ financial institutions, turning complex risk into practical controls, reliable service and results leadership can see.

Get in touch See the case studies
Scope15+Banks and credit unions whose platform delivery and operations I lead
Security99.65%Reduction in security vulnerabilities tracked through Vanta monitoring
Certifications led2SOC 2 Type I and ISO/IEC 42001, from policies to audit
Experience19 yrsFrom IT technician to governance lead, in Brazil and Canada
Case studies

Outcomes, not checklists.

Three programs I led at TRG Mobilearth, a digital banking provider for banks and credit unions.

Security & compliance

SOC 2 Type I for a digital banking platform

Certified · Led end to endVerify on trust center (opens in a new tab)

The challenge

Banks and credit unions trusting us with their customers needed independent proof that our security, availability and confidentiality controls were real and repeatable, not just written down.

What I did

  • Owned the certification from scoping to audit
  • Wrote and rolled out the security policies and risk management framework
  • Assigned control owners and automated compliance workflows and evidence collection in Vanta
  • Set up continuous monitoring and a remediation process for vulnerabilities

The result

SOC 2 Type I certification, and a control framework the team now runs day to day, ready to carry into Type II.

99.65%Reduction in security vulnerabilities through automated monitoring, evidence collection and remediationMeasured in Vanta
Type ISOC 2 certification covering security, availability and confidentiality
AI governance

Governing AI in banking with ISO/IEC 42001

Certified · Led end to endVerify on trust center (opens in a new tab)

The challenge

Bringing AI into banking meant financial institutions needed assurance about privacy, data handling and how the AI would be governed over time.

What I did

  • Led the ISO/IEC 42001 certification from start to finish
  • Implemented the policies and controls of an AI management system
  • Built in clear accountability and risk-based review for AI features
  • Made responsible AI practices part of normal product delivery

The result

ISO/IEC 42001 certification for the AI banking platform in 2025, maintained through the 2026 surveillance audit. Institutions now have a recognized standard to point to when regulators and customers ask how AI is governed.

ISO/IEC 42001The first international standard for AI management systemsCertified 2025 · maintained through 2026 surveillance audit
2026Platform named AI Banking Solutions Provider of the YearACQ5 Global Awards · company award
Technology operations

Running reliable service for 15+ financial institutions

Ongoing · I lead the operation

The challenge

Digital banking has to stay available. Institutions needed fast, well-communicated incident handling, and our leadership needed a clear view of how service was really performing.

What I did

  • Wrote and implemented the company's Incident Response Plan, and lead incidents, stakeholder updates and root cause analysis
  • Manage the teams handling incidents, service requests and QA/production support
  • Rebuilt help desk workflows in Jira Service Management
  • Built executive KPI dashboards and project governance in Jira

The result

C-level visibility into service performance, trends and team productivity, a repeatable incident process, and faster delivery.

15+Banks and credit unions supported in production
+9.4%Sprint completion efficiency after workflow automation and governance changes
Speaking

On stage with banking leaders.

Conference talks on how banks and credit unions can adopt AI with the governance to back it up.

2026
Speaker · ECCU Bankers' Association Conference

Digital Transformation in the Age of Artificial Intelligence

Governance, risk and innovation in the Eastern Caribbean banking sector.

2025
Speaker · CBUG Virtual Conference & AGM

The Future of Banking: Powered by AI

How financial institutions can use AI to sharpen strategy and deliver more personal customer experiences.

Experience

From IT technician to governance lead.

A career built from the server room up, across retail, ERP and digital banking, in Brazil and Canada.

  1. 2022 – Now

    Project Manager, Technology Operations & Governance Lead

    TRG Mobilearth Inc. · Burnaby, BC

    • Lead delivery and operational support of digital banking for 15+ financial institutions
    • Led SOC 2 Type I and ISO/IEC 42001 certifications
    • Manage incident, service request and QA/production support teams
  2. 2021 – 2022

    Business Analyst

    TRG Mobilearth Inc. · Burnaby, BC

    • Turned business strategy into a project roadmap for a digital banking platform
    • Refined SDLC policies and procedures to raise delivery quality
  3. 2020 – 2021

    Career Break — Education & Professional Development

    Yorkville University · Vancouver, BC

    • Dedicated period for academic studies and professional development
  4. 2013 – 2019

    IT Project Manager & Business Analyst

    Citycol · Rio de Janeiro

    • Modernized infrastructure across 80 retail locations, deploying nearly 300 endpoints
    • Cut deployment time and cost by 40% in one phase; new ERP reduced rework by 90%
    • Presented IT strategy and recommendations to C-level leadership
  5. 2013 – 2014

    IT Project Manager

    Botswana, retail company · Rio de Janeiro

    • Delivered a full Linx ERP implementation, from supply chain to point of sale
    • Built real-time omnichannel inventory across B2B, e-commerce and stores
  6. 2007 – 2012

    IT Manager

    HSPORTS · Rio de Janeiro

    • Promoted from technician to IT Manager in 18 months
    • Launched 13 retail stores and 3 e-commerce businesses
    • Cut the IT support budget by 20%

Certifications

  • Project Management Professional (PMP)PMI · 2017
  • Agile LeadershipU. of Colorado · 2026
  • Cybersecurity Strategy & Risk ManagementUBC · 2024
  • Professional Scrum Master IScrum.org · 2022
  • Six Sigma Yellow BeltVMEdu · 2018
  • ITIL FoundationEXIN · 2015

Education

  • BBA, Project ManagementYorkville · 2021 · GPA 3.7
  • Information Technology ManagementINFNET · 2017 · GPA 3.7
Leadership

How I lead.

What I bring to a leadership table, beyond the frameworks.

Governance should speed things up.

Good controls remove doubt. When people know the rules and the owners, decisions get made faster, not slower.

Risk belongs in plain language.

A board shouldn't need a glossary. I translate technical exposure into business impact leaders can act on.

AI needs owners, not just policies.

Every AI system should have a named person accountable for what it does. That's where trust starts.

Capabilities

Where I add the most value.

Full career history on LinkedIn.

Governance & risk

Risk management frameworks, policy and standards, executive KPI reporting, change management

Security compliance

SOC 2, continuous control monitoring, evidence automation, vulnerability remediation

AI governance

ISO/IEC 42001, responsible AI, accountability models, AI in financial services

Technology operations

Incident response, IT service management (ITIL), Agile and Scrum delivery, ERP implementation

Builds

I build what I govern.

Systems I design and run myself, so I understand the technology my teams operate, not just the policies around it.

Automation

Market-signal scanner

Rule-based screening that runs on a schedule and pushes real-time alerts when conditions are met.

Why it matters: scheduled jobs, alerting and monitoring are the same building blocks I govern at work.

Python · Flask · systemd
Monitoring agent

Price-monitoring agent

Tracks prices against benchmarks, classifies deals and sends alerts, with a web dashboard and native iOS app.

Why it matters: shows I can take a system from idea to production across web, mobile and automation.

Python · GitHub Actions · SwiftUI
Secure web app

Private finance application

Single sign-on for approved users only, encrypted off-site backups and least-privilege service accounts.

Why it matters: the controls I ask teams for, applied to my own systems.

FastAPI · SQLite · OAuth
Contact

Let's connect.

I'm always happy to talk technology risk, AI governance and digital banking, whether it's a speaking invitation, a panel or a conversation between peers.

Email me LinkedIn