Robert Tolman Email and Phone Number

Work with issue owners and accountable executives to ensure action plans for priority issues are designed for success, review ongoing execution of selected issues, help issue owners be more successful, and drive greater discipline around key deliverables.

Directed independent operational risk management assessment programs to provide a standardized approach for developing independent views of risk across the company for business groups and enterprise functions, as well as international regions and legal entities. Program includes inherent and residual risk, control design and effectiveness, and risk management capability assessments.

Managed independent risk management risk assessment teams accountable for independent assessment execution and oversight of front-line risk assessment execution covering technology, information security, business resiliency, and third party risk management. Coverage includes evaluating inherent and residual risk assessments, control testing and validation, and identification and alignment of associated issues and corrective actions.

Manage evaluation of Wells Fargo Technology Audit’s definition and evaluation of enterprise risk management. Participated in working group to define a business-based application audit coverage approach to address regulator requirements for application auditsManage execution of audit plan that included Customer Deposits, Operations, Digital Channels, internal corporate technology, Regional Banking Technology, and technology infrastructure. Coverage areas have included application security design, Web application code security, vendor management, information security, BCP, and other general control areas.Maintain Project Audit Coverage Coordinator function including defining the audit methodology, leading reporting and trending functions, and providing support to project audit staff across the audit organization.Manage a team of up to 15 auditors; responsible for recruiting and team member development.Maintain partner relationships with applicable business partners.Developed, tested, and maintain applications currently in use for team member scheduling and for tracking project audits and performing initial risk assessments.

Responsible for managing engagement with primarily manufacturing and insurance clients.Performed engagement assessments, developed work programs, and executed (or supervisedexecution) testing of infrastructure and application controls.