Joshua Stern Email & Phone Number

Sydney, New South Wales, Australia

Sydney, New South Wales, Australia

Afterpay was acquired by Block in February 2022. While continuing many of my Afterpay responsibilities, at Block I also evolved Business Continuity and Disaster Recovery towards Operational Resilience as a Technical Program Manager (TPM). Oversaw the implementation of and compliance with the Operational Resilience requirements for EU and UK electronic money and payments regulations. Delivered BIA (Business Impact Analyses) and risk assessments over third parties, and third party audits over Block and Afterpay.

Sydney, New South Wales, Australia

Responsible for uplifting and embedding the Enterprise Risk and Operational Risk frameworks, processes, GRC system, training and governance, suitable for Afterpay as a cloud native FinTech scale-up. Reliably delivered the first global RCSA (Risk and Control Self Assessments), the first enterprise wide BIAs (Business Impact Assessments) and implemented the GRC tool. Risk Advisor to all areas of the business and Board members.Afterpay was acquired by Block (formerly known as Square) in Feb 2022

Responsible for leading teams up to 30 staff and collaborating with risk colleagues to deliver core components of the Operational Risk framework including Risk and Control Self Assessment (RCSA), Controls Assurance, Incidents, Issues, Actions, Training and Culture across ~3,500 staff globally. Develop and sponsor strategic initiatives to improve risk practices, and efficiently produce regular and insightful risk reporting (>50 reports per month).Key Skills: Operational Risk, Enterprise Risk Management, Frameworks, Governance, Risk Assessments, Policy & Standards, Leadership, Strategy, Developing Staff, Tableau, Power BI, R Programming, Data Science, Risk Reporting, Executive Reporting

Responsible for leading teams of up to 20 people completing assurance testing in support of financial statement audits or internal audit purposes for financial services companies. Earned CISA qualification.Developed deep technical knowledge and experience using industry standard security frameworks (ISO 17799, COBIT, ITIL), Cyber Security and related technologies (e.g. MSSQL and Sybase databases, TCP/IP, IPSec and VPN networking principles, and Linux, BSD, Windows and Mainframe operating systems).