Brad Shepard Email & Phone Number

New York, NY, US

New York City, New York, US

• Responsible for development, oversight, and execution of the global Technology (Cyber Security, Infrastructure, Applications) and Corporate Services (Procurement, T&E, Business Continuity, Facilities) audit plan.
• Led the Finance audit coverage in 2024, including coverage of Controllers, Payroll, HR, & Tax.
• Responsible for the strategy and implementation of data analytics and automation into the culture and operations of the IA department.
• Manage Audit Operations, including development of the audit methodology, annual risk assessment and planning processes, and management of the audit system.
• Developed and implemented a department wide Quality Assurance & Improvement Program (QAIP) aligned to IIA and international audit requirements, including management of engagement level QA review process.
• Responsible for Jefferies Global Sarbanes-Oxley Compliance Program starting in FY 2024, including materiality & fraud risk assessment, entity scoping, training, reporting, and testing program.

London, GB

• Responsible for overseeing and managing Resilience Risk for the Americas region, driving resilience risk identification and proactive risk management, including identifying horizon and emerging risks to assist the.
• Led the global 2nd Line review and challenge of the Group Resilience implementation of new resilience standards and realignment to US & UK regulatory requirements.

London, GB

• Global Co-Head of Barclays Markets Technology Audit.
• Previously Global head of technology audit for Barclays International Cards & Payments business, including the US Consumer Bank, Barclays Payment Solutions, Barclaycard Germany, Contact Centers and Fraud.
• Previously led Global Technology Application Development, Enterprise Architecture, and Group Innovation Office and the US Technology audit lead for: Infrastructure, Resilience, Change Initiatives, and Corporate Real.
• Manage a team of 13 auditors located in the US (New York and Delaware) and UK (London and Northampton).
• Implemented of Agile Auditing within my audit teams resulting in an increased efficiency and focus on risk.
• Responsible for supporting US related regulatory reporting, audits, and requests (e.g. FRBNY, FDIC, NYSDFS, etc.)

London, GB

• Leader for EY’s IT internal audit services for Insurance companies with responsibilities for building and developing client relationships with key client contacts and executives, account management, and developing.
• Currently managing the outsourced IT internal audit functions for three insurance companies; overseeing the annual risk assessments, development of internal audit plans, execution of audit plans, staffing, budgeting.
• Managing multiple co-sourced internal audit and SOX related engagements to augment client teams, to include audits of IT General Controls, SharePoint, Microsoft Exchange Email, Good for Enterprise mobile email, Cyber.
• Leading the development of internal and external thought leadership on various topics impacting the Financial Services sector, including: Digital Innovation, Cyber, Agile SDLC, Blockchain, and Robotics.
• Led or co-led the pursuits in over $10 million of engagement wins and part of the pursuit team in over $15 million of engagement wins in 2016.
• Involved in EY’s Veteran Leadership Network.

New York, NY, US

• IT Audit Director, Head of America's IT Audit Group
• Lead technology audit coverage for AIG's North America Commercial Insurance and Global Claims & Operations business units, United Guaranty Corporation, and Latin America and Caribbean (LAC) sub-region.
• Managed a team of 15 auditors located in New York, New Jersey, Colombia, and Argentina.
• Identified thematic technology related risks across that LAC environment and partnered with technology and risk functions to define action plans to resolve.
• Defined team vision and objectives, and set metrics for tracking success in achieving.
• Improved the teams’ operational metrics year over year (e.g. hours per audit, hours per action plan verification, number of past due audit issues, etc.)

New York, NY, US

• Head of MetLife Global Business Resiliency team, including Crisis Management, Business Continuity Disaster Recovery.
• Led MetLife’s Global Business Resiliency function, which includes Crisis Management, Business Continuity and Disaster Recovery reporting into the Chief Information Security Officer (CISO). Directly supervise nine team.
• Led the revitalization of MetLife’s business continuity function through its evolution from a federated structure with a US based administrative function, to a global governance team providing consultative subject.
• Developed and initiated a three year road map to implement a world class global business resiliency function for MetLife, including redefinition of the governance structure, development of an integrated business.

New York, NY, US

• Provided leadership, professional development and structure to the global IT Audit team (47 FTE’s) with direct supervision responsibility for 18 team members and joint responsibility for IT audit teams located.
• Responsible for IT audit coverage across various MetLife organizations, including the Americas business operations, Global IT Infrastructure, MetLife Bank (US), Investments, Finance, Corporate Services (HR, Legal.
• Partnered with MetLife’s SOX Project Management Office to reassess the company's approach to evaluating and testing IT controls. This effort resulted in a reduction of approximately 70% of the IT specific controls.
• Led an evaluation of internal SAS 70 reports and the implementation of a compliance program that resulted in >$250,000 in savings in 2010 as a consequence of reductions in outdated SAS 70 reports, reduced controls and.

New York, NY, US

• Led the Integrated Audit initiative that was aimed at improving technology integration into financial process audits by leveraging technology to improve synergy and gain greater assurance around business system.
• Developed and implemented a comprehensive approach to auditing IT general controls across all lines of business and infrastructure in order to reduce redundant audit activities, impact on clients, improve consistency.
• Integral part of the team that redeveloped IT Audit’s Integrated Risk Assessment and Annual Audit Planning process, which resulted in a risk based assessment that integrated with our business and functional audit.
• Led the department’s initial Data Analytics implementation strategy from its inception in 2007 through 2009. This team integrated analytic tools into audits of business processes and continuous control monitoring to.

London, GB

• Executive responsible for leading multiple engagement teams, providing guidance and expertise to managers and team members, perform procedures focused on especially complex, judgmental and/or specialized issues, as.
• Member of the firms Global Pharmaceutical Center responsible for understanding issues and concerns of the pharmaceutical industry as well as assisting in the development of the firms view point on key issues within the.
• Provided executive support to the North Florida practice leader in all areas of practice management, to include providing supervisory oversight of area Management Team, formal and informal counseling and involvement in.
• As part of the firms Risk Advisory Services practice, responsible for understanding the functionality, interfaces and interdependencies of the firms’ sub-service lines in order to develop client specific service.

New York, New York, US

• As an integral member of the management team, actively identified and formulated strategies that effectively improved the audit process. Led and participated in departmental and cross-functional/divisional team(s).
• Directly supervised eight Audit Seniors and Supervisors. Managed the audit process, including: risk assessment, planning, fieldwork and report writing. Led multiple audit teams; reviewed both financial and IT controls.
• Developed and maintained solid relationships with key business partners to better understand emerging issues and impact on the control environment.
• Member of the initial Sarbanes-Oxley (SOX) project office; with specific responsibility for developing an IT risk identification methodology, control framework and testing approach.

Arlington, Virginia, US

US Army - Signal Corp

Bs, Finance

Finance