Andrew Vincent Email & Phone Number

Chicago, Illinois, US

• Technology Risk and Controls | Asset Servicing Technology
• Cyber and Information technology Risk and Controls expert advising business and technology leaders on emerging threats, risks, controls, and related treatment
• Manage risk and controls while enabling rapid technology innovation to accelerate the growth of Northern Trust’s asset servicing business
• Oversee the execution of technology risk management processes and compliance to Northern Trust’s risk policies, control standards and global regulatory requirements for asset servicing
• Liaison between technology, risk and compliance function, and internal audit team to ensure compliance, remediate risk and control issues, and advise on technology control design for the global Asset Servicing.
• The role is a key function within Global Information Technology, reporting to the global Technology and Risk Control Officer

London, GB

• Assurance and Advisory Services | Americas | Technology Risk
• Architected a targeted advisory program to identify existing open risks requiring remediation. Delivered program in key geographies impacted by risk management sustainability challenges and emerging security risks..
• Built a program to partner with business management focused on discovering and identifying data repositories, assessing the threats and risks against sensitive data, and executing diagnostics evaluating the security.
• Implemented a custom baseline risk framework to assess security, technology, and operational resilience controls across a broad spectrum of business units. Leveraged results to drive insights horizontally across.
• Participate as a risk subject matter expert as a part of the Company’s security incident response program.
• Contribute to ongoing global security uplift program focused on building functional and technical capabilities by providing feedback on projects and contributing ideas on areas for improvement. Developed several.

GB

• Risk Assurance | Process Assurance; Trust and Transparency Solutions
• Directed the assessment of readiness over SOC 2 principles and HITRUST certification requirements for a large benefits administration company
• Established a centralized audit approach for evaluating the completeness and accuracy of key system-produced information for a large pension, insurance and asset management company across eight major business units
• Led the redesign of testing approach to leverage data mining against documentary evidence prepared by client to support the execution of testing against IT general controls
• Managed the standardization of the audit approach for a large property & casualty insurance provider allowing 15% of overall engagement hours to leverage the centralized Shared Service Center during the first year
• Supported the development of testing strategy and related analytical toolset to assist in the completeness and accuracy validation of segregation of application access and change management code versioning data at a.

Chicago, IL, US

• Advisory Services | Business Advisory Services
• Led the design and execution of custom developed tools enabling the monitoring of business data and audit analytics for an integrated claims business process assessment project at a property & casualty insurance company
• Directed the post-implementation review and designed automated evaluation tools to independently verify the business process design of a bid pricing system for a technology services provider
• Directed the scoping, assessment, and reporting over service organization technology controls and managed the integration of controls supporting business operations for one of the top investment management and trust.
• Developed mining and analysis tools supporting an integrated business process review around freight discounts on sales for a technology services provider
• Provided guidance on the implementation of organizational risk assessments following industry best practices (NIST, ITIL, etc) at a leading securities exchange

Chicago, IL, US

Chicago, IL, US

Worldwide, OO

• Enterprise Risk Services Group
• Assisted in the planning, execution, and completion of information systems audits, business process control reviews supporting internal control, Sarbanes-Oxley, and SAS 70 audits at a large banking, credit card, and.
• Assisted in the review of operational, financial, and technology processes to provide management with an individual assessment of business risk, internal control, and the overall effectiveness and efficiency of the.
• Designed advanced security assessment approach for the SAS 70 of a Fortune 500 financial services and processing firm
• Executed a post-implementation review on contract management software supporting the delayed prosecution agreement at a Fortune 1000 medical manufacturer

Worldwide, OO

• Technology and Knowledge Management Group | XBRL Solutions Design
• Supported XBRL solutions design and development through US GAAP research and analysis, designing XBRL financial reporting and transaction processing taxonomy schema, and developing XBRL instance documents
• Contributed to the design of the XBRL US GAAP Taxonomy 1.0 in conjunction with the SEC XBRL US Financial Reporting Taxonomy Project

Emporia, KS, US

Topeka, Kansas, US

• Key Responsibilities
• Facilitated the delivery of meals to base operations and flight personnel (~600 personnel)
• Managed the delivery, use, and accountability of fitness and recreational equipment during deployments (domestic & international)
• Responsible for transportation of key equipment during bare base operations, including maintaining heavy equipment drivers license (max 5T)
• Supported the design and organization of lodging during bare base deployments
• Established and promoted club recreational programs for overseas deployments

M.B.A.

B.S., Information Systems

B.S., Accounting