Tom Bradshaw Email & Phone Number

Salt Lake City, Ut, Us

Responsible for the Combined US Operations (CUSO) Third Party Risk Management program

Dual officer of both Bank of the West and BNPP Americas. Lead the third-party risk program and international team across multiple banks and subsidiaries. Merged and aligned disparate third-party programs across operating entities and across country jurisdictions. Integrated various control domains into a single third-party framework, covering requirements throughout the bank. Enhanced the operational risk framework by aligning and contributing to the KRIs, KPIs, RCSA, Risk ID, incidents, losses, and fraud.Performed independent risk validation and testing of the 1LOD control design and execution. Developed comprehensive risk reporting to inform management of key issues and areas requiring attention. Interfaced with regulators at the FDIC, FRB, OCC, OSFI, as well as internal audit.

Greater Salt Lake City Area

Lead a team which manages the Third Party Risk Management framework. Responsibilities include development of the Policy and framework, regulatory and audit responses, communication, and training of the third party risk program.

Greater Salt Lake City Area

Director, Vendor Management for Sallie Mae Bank. This includes oversight of all third parties, risk evaluation and mitigation strategies, SLA tracking and remediation, invoice and spend reconciliation, and maintaining relationships with third parties.Secondary roles include oversight of critical risk areas for our third parties, including Security, Business Continuity, Business Process Outsourcing, Vendor Management, Audit, and controls surrounding these areas.Skills include IT and Information Security auditing, Third-Party Risk and Compliance management in the financial industry, Operational oversight and controls, and project management.

Managed a team of engineers that supported infrastructure, network, security, storage arrays and applications that support the product. This includes FTP servers, Windows, Linux, VMware ESX, Check Point firewalls, Imperva web application firewalls, networking switches, load balancers, and fiber and iSCSI SANs. Other non-technical responsibilities included capital budget planning and expenditures, conducting security assessments internally as well as representing SunGard during security audits.

Mba, Business

Bs, Information Systems