Tim Coulehan Email & Phone Number

San Mateo, Ca, Us

Senior Program Manager responsible to build out information security programs such as: Information Security Risk Assessments, Issue Management, implementing a Governance, Risk, and Compliance (GRC) platform, and other first line of defense functions for the Information Technology organization.

New York, Ny, Us

Front Line Risk and Controls Manager for Corporate Risk and Compliance

San Francisco, California, Us

Jan 2019: Enterprise Finance and Technology - Control Executive Team - Manage a team responsible for Business Process Management (BPM) execution; including documenting process inventories, identifying inherent risks, risk and control identification. - Provide education as well as first line feedback and challenge to the line of business.Feb 2017 - Dec 2018 Data Management and Insight - Risk Management and ComplianceCurrently functioning as first line of defense Operational Risk Manager for the Data Insights line of business. Responsibilities include: - Managing the execution of the Corporate Business Process Risk Management (BPRM) program within the Data Insights group. This includes, but is not limited to: risk and control identification, process mapping, risk rating identification, and remediation planning. - Maintenance of the Data Insights process inventory, which includes risk and control documentation in the system of record, and conducting formal risk assessments against those processes.

Assisting large public accounting firm in planning and executing on technology audits and assessments.

Pittsburgh, Pennsylvania, Us

- Manage eGRC Solutions team, responsible for the configuration and system administration activities for the enterprise Archer Governance Risk and Compliance (GRC) platform. - Built a successful and diverse team through effective recruiting and interviewing practices. The team is comprised of a mix of technical, business, and risk resources all contributing to the overall project execution. - Serve as liaison between PMO office, PNC internal technology support team, and third party implementation team to configure, enhance, and support the software development life cycle for business use cases. - Aide in the identification of strategic business use cases, contributing to the overall enterprise GRC roadmap for the Bank.

Pittsburgh, Pennsylvania, Us

- Functioned as day-to-day liaison with a third party to design a strategic Target Operating Model for Technology and Operations (T&O) Risk Management first line of defense activities. - Aided in the build out and support of those first line of defense functions, including areas such as:the risk and control self-assessment process for technology, Key Risk Indicator (KRI) identification across T&O, technology policy management, technology issues management, technology assessment, and T&O GRC management. - Served as T&O Risk Committee secretary, producing agendas and collecting documentation to be shared among committee members. Documented minutes and key takeaways for action. - Coordinated monthly regulatory updates for Technology: soliciting agenda items, gathering feedback, and building our presentations for OCC review.

Pittsburgh, Pennsylvania, Us

- Served as a risk business liaison responsible to Operational Risk, Technology, Audit, Asset Management, and HR organizations for communication, management, monitoring, and escalation of key enterprise risk initiatives such as Risk Appetite, Strong Risk Management, Key Risk Identification, and Basel compliance efforts. - Functioned as second line of defense to challenge business compliance plans, identify gaps, confirm rule compliance declaration, and senior management and regulatory reporting. - Supported corporate Global Risk and Compliance (GRC) efforts through controls analysis, lines of defense discussions, and system testing. - Liaised with Finance, the Economic Capital team, Regulatory Capital team, and the businesses to enhance quarterly reporting processes, understand effects and variances, and promote capital management.

Pittsburgh, Pennsylvania, Us

- Managed a team responsible for technology assessments for internal bank systems, identifying risks and documenting potential control gaps. - Served as secretary for an executive committee, chaired by Corporate Vice Chairman in charge of Operations and Technology. Responsibilities consisted of managing agendas and topics, documenting minutes for key decisions, and driving discussion of key topics. - Worked with the CIO to develop a technology governance structure: enhancing responsibilities, formalizing decision-making, and increasing communication across the technology organization through establishment of committees and sub-committees focusing on specific areas. - Assisted in developing and implementing a new technology policy framework for the company. Accomplished this by working jointly with enterprise risk policy and technology subject matter experts to align with corporate standards. - Responsible for writing the corporate Technology Risk Profile on a quarterly basis. This included identification of key risks, documentation of remediation efforts, and monitoring progress. - Responsible to report on key technology controls as they related to Sarbanes-Oxley compliance, Audit and Regulatory reporting, and technology management.

New York, Ny, Us

- Managed internal and external IT audit engagements, including scheduling of resources, creation and management of budgets, engagement planning with clients, engagement execution, and review of work product prior to release. - Managed a client portfolio consisting of retail, banking, manufacturing, and third-party service organizations. - Responsible for the IT relationship and work delivery for new internal audit client; including initial identification, documentation, and testing of key IT controls through creation of process flows, process narratives, and risk and control matrices. - Participated as a trainer in National Instructor Program; which includes conducting training classes related to new standards and/or technology released by KPMG. - Served as mentor to younger staff; advising on professional questions, client relationships, work delivery, and general discussions.

Toronto, On, Ca

- Performed and led the IT General Controls work for multiple external audit clients; assessing controls related to Logical Access, Physical Access, Change Management, Program Development, and Computer Operations as they related to client’s financial system. - Performed and led the IT General Controls work for multiple service organizations, documenting design and testing of key controls as well as involved in the production of SAS70 reports. - Led the efforts in documenting risks and testing key IT controls for clients over multiple specialized audits, such as: Year-end financial statement audit procedures over key IT functions such as Logical Access, Physical Access, Change Control, and Computer Operations; Identification and documentation of processes, risks, and controls related to release of new external customer website; Risk and control evaluation for new Quote to Purchase Order system; - Point-of-Sale (POS) system implementation review, which included project planning documentation review, test plan and procedure reviews, application security reviews, segregation of duties analysis, systems interface reviews, and key security processes

- Responsible for releases and updates of internal financial applications, which included: needs assessment, requirements documentation, use case design, project planning and management using MS Project, training, documentation, and support. - Aided in the research, requirements gathering, business case proposal and system demonstration for new JD Edwards ERP modules (Competency Management and Performance Management). - Led the requirements gathering, vendor analysis, and decision-making and implementation effort to deploy a new Applicant Tracking System for the Human Resources department. - Aided in the design and development of new project management documents including: Business Case and Use Case templates. - Generated process documents for internal applications supported by the business applications team; which included functional and technical data flows. - Aided in company-wide evaluation of time and expense system needs; made recommendation for enhancements and re-implementation of current system.

Pittsburgh, Pa, Us

Masters, Public Policy And Management

Bsba, Business Administration