Stephen Samuel Email and Phone Number

Manages risk identification, measurement, and aggregation processes, ensuring alignment with organizational risk strategy and appetite.Conducts comprehensive analysis and oversight of risk and control environments, consulting on mitigation plans to maintain exposures at acceptable levels.Develops and prepares compliance-related documentation, including Client Interview Questionnaires, in accordance with regulatory standards such as OCC, BSA/AML, and PCI.Leads complex projects to enhance risk mitigation strategies, advising senior management on control environment status, and implementing innovative solutions for risk prevention.

Conducted comprehensive IT audits, including system development, IT general controls (ITGC) testing, and control readiness assessments, ensuring adherence to regulatory standards and identifying areas for operational risk reduction.Executed SAP transaction tests to improve clients' technical operations in user and access management, while facilitating SOX compliance through effective collaboration with control owners and auditors.Managed Risk and Control Self-Assessment (RCSA) issue resolution, prioritizing findings by risk level and due dates, and collaborating with stakeholders to ensure timely and complete mitigation of identified risks.Led Business Control Management and Centralized Quality Control testing teams, assessing the design and effectiveness of IT controls in real estate originations, and delivered precise reports on testing outcomes to uphold high standards of accuracy and quality.

Developed comprehensive audit plans, including scope statements and milestone schedules, to ensure targeted deliverables met organizational standards and objectives.Executed rigorous IT General Controls testing across various applications, assessing both design and effectiveness in areas such as change management, access control, and encryption protocols.Analyzed and interpreted organizational IT policies and procedures to identify key controls, mitigating risks, and enhancing the security posture in compliance with frameworks like SOX and HIPAA.Collaborated effectively with senior management and DevOps teams to align testing scopes and remediate issues, ensuring the integrity of IT systems prior to deployment.