Andrew Vincent Email & Phone Number

Chicago, Illinois, Us

Technology Risk and Controls | Asset Servicing Technology• Cyber and Information technology Risk and Controls expert advising business and technology leaders on emerging threats, risks, controls, and related treatment• Manage risk and controls while enabling rapid technology innovation to accelerate the growth of Northern Trust’s asset servicing business• Oversee the execution of technology risk management processes and compliance to Northern Trust’s risk policies, control standards and global regulatory requirements for asset servicing• Liaison between technology, risk and compliance function, and internal audit team to ensure compliance, remediate risk and control issues, and advise on technology control design for the global Asset Servicing technology portfolio• The role is a key function within Global Information Technology, reporting to the global Technology and Risk Control Officer• Drive ownership and accountability for cyber and information security controls within the technology group. Monitor and assess effectiveness of control implementation within the first line, through a variety of processes including self-assessments, testing, and monitoring key performance indicators

London, Gb

Assurance and Advisory Services | Americas | Technology Risk• Architected a targeted advisory program to identify existing open risks requiring remediation. Delivered program in key geographies impacted by risk management sustainability challenges and emerging security risks. Collaborated with leadership including regional CISOs and CIOs to deliver remediation plans.• Built a program to partner with business management focused on discovering and identifying data repositories, assessing the threats and risks against sensitive data, and executing diagnostics evaluating the security and protection of data. Provided solutions to resolve identified issues.• Implemented a custom baseline risk framework to assess security, technology, and operational resilience controls across a broad spectrum of business units. Leveraged results to drive insights horizontally across business units and report on maturity of environments to business line leaders and regional CISOs.• Participate as a risk subject matter expert as a part of the Company’s security incident response program.• Contribute to ongoing global security uplift program focused on building functional and technical capabilities by providing feedback on projects and contributing ideas on areas for improvement. Developed several assurance and advisory projects on behalf of Global Internal Audit as a result of monitoring security uplift activities.• Drove assessments focused on cybersecurity and data privacy compliance risks for company acquisitions within cybersecurity assessment and talent assessment industries.• Maintained expertise in data privacy risk frameworks aligned to GDPR (within UK, Germany, Netherlands, France, Spain), Swiss data privacy law (Switzerland), CCPA (United States), and LGPD (Brazil). • Advised management on key risks and factors impacting upcoming blockchain solutions.• Authored training programs geared towards internal audit and 2nd line on Robotics Process Automation and Blockchain.

Gb

Risk Assurance | Process Assurance; Trust and Transparency Solutions• Directed the assessment of readiness over SOC 2 principles and HITRUST certification requirements for a large benefits administration company• Established a centralized audit approach for evaluating the completeness and accuracy of key system-produced information for a large pension, insurance and asset management company across eight major business units• Led the redesign of testing approach to leverage data mining against documentary evidence prepared by client to support the execution of testing against IT general controls• Managed the standardization of the audit approach for a large property & casualty insurance provider allowing 15% of overall engagement hours to leverage the centralized Shared Service Center during the first year• Supported the development of testing strategy and related analytical toolset to assist in the completeness and accuracy validation of segregation of application access and change management code versioning data at a leading investment adviser and hedge fund• Supported the PMO and client communications for a large Regulation SCI review at a financial services company

Chicago, Il, Us

Advisory Services | Business Advisory Services• Led the design and execution of custom developed tools enabling the monitoring of business data and audit analytics for an integrated claims business process assessment project at a property & casualty insurance company• Directed the post-implementation review and designed automated evaluation tools to independently verify the business process design of a bid pricing system for a technology services provider• Directed the scoping, assessment, and reporting over service organization technology controls and managed the integration of controls supporting business operations for one of the top investment management and trust services organizations• Developed mining and analysis tools supporting an integrated business process review around freight discounts on sales for a technology services provider• Provided guidance on the implementation of organizational risk assessments following industry best practices (NIST, ITIL, etc) at a leading securities exchange• Guided Community and Regional Banks ($800M - $11B) through FFIEC guidance, directed the assessment of their environments, and assisted in their alignment with leading practices within operations and technology

Chicago, Il, Us

Chicago, Il, Us

Worldwide, Oo

Enterprise Risk Services Group• Assisted in the planning, execution, and completion of information systems audits, business process control reviews supporting internal control, Sarbanes-Oxley, and SAS 70 audits at a large banking, credit card, and financial services firm.• Assisted in the review of operational, financial, and technology processes to provide management with an individual assessment of business risk, internal control, and the overall effectiveness and efficiency of the process• Designed advanced security assessment approach for the SAS 70 of a Fortune 500 financial services and processing firm• Executed a post-implementation review on contract management software supporting the delayed prosecution agreement at a Fortune 1000 medical manufacturer

Worldwide, Oo

Technology and Knowledge Management Group | XBRL Solutions Design• Supported XBRL solutions design and development through US GAAP research and analysis, designing XBRL financial reporting and transaction processing taxonomy schema, and developing XBRL instance documents• Contributed to the design of the XBRL US GAAP Taxonomy 1.0 in conjunction with the SEC XBRL US Financial Reporting Taxonomy Project

Emporia, Ks, Us

Topeka, Kansas, Us

Key Responsibilities• Facilitated the delivery of meals to base operations and flight personnel (~600 personnel)• Managed the delivery, use, and accountability of fitness and recreational equipment during deployments (domestic & international)• Responsible for transportation of key equipment during bare base operations, including maintaining heavy equipment drivers license (max 5T)• Supported the design and organization of lodging during bare base deployments• Established and promoted club recreational programs for overseas deployments• Supervised safe operation of diesel and mogas power generators and heating equipment• Mobilized 9/11• Maintained Security Clearance

M.B.A.

B.S., Information Systems

B.S., Accounting