Wesley Lo

About Wesley Lo

I am passionate about building robust risk management programs that empower…

Experience

1. Third Party Risk Program Manager

   NetApp

   Oct 2021 — Present

   Establish overall management of NetApp\'s cybersecurity third-party vendor inventory, including onboarding, periodic reviews, assessment questionnaires, and terminations.Lead two full time employees dedicated to assessing cybersecurity controls of new and existing vendors.Produce high quality assessment reports that articulate risk in a meaningful way to stakeholders and management, conveying sometimes complex topics to a variety of audiences.Collaborate across various stakeholders and provide feedback to support leadership, planning, and management to execute appropriate third-party engagements through business cases.Contribute to the strategic direction and goals of the organization by having external and internal awareness of operational activities, recognizing and anticipating trends, identifying issues and opportunities, and recommending actions to stakeholders committees, and management.Identify cross-workstream dependencies to ensure a cohesive strategy and manage process documentation and data connectivity across risk teams.Lead vendor risk integration tasks for four acquisitions which includes vendor identification, procurement transition, and risk assessments.Negotiate Master Service Agreements, End User Licensing Agreements, and other contractual documents for appropriate security language.