andrew garforth

it and cyber controls testing lead

About

I am an experienced IT Audit and Risk executive with a demonstrated history of working in leadership roles in banking and financial services, along with a wealth of cross-industry experience obtained in the professional services sector. I have over thirty years of experience leading and advising on audit and technology risk across all business levels covering all lines of defence. I am a highly effective communicator with excellent leadership and interpersonal skills; I also have a proven track record of planning and delivering programmes of work on time and to budget, often within some very challenging environments. I recently led the first line technology and operational risk capability within the Co-operative Bank and was instrumental in managing the technology and operational risk profile of the Bank’s biggest outsourcing remediation project. I am a qualified chartered accountant (FCA) and also hold the CISA and CISM qualifications.

Country

united kingdom

City

liverpool

Industry

information technology and services

Skill

assurance, it audit, it strategy, cisa, internal audit, sox, audit, cism, auditing, governance, external audit, internal controls, information technology, financial services, financial risk, cobit, sarbanes oxley act, risk management, enterprise risk management

Experience

it and cyber controls testing lead

lloyds banking group

2019-9 - Present · 7 yrs 1 mo

it risk and assurance specialist

grant thornton llp

2017-8 - 2019-9 · 2 yrs 2 mos

* Contract IT Risk & Assurance Specialist with Grant Thornton’s Associate Program, working on a variety of clients in the FS and “Etail” sectors across the UK and Europe. My assignments included: * SOX testing for a London based Reinsurance company; * Delivering a variety of IT Audit reviews for the UK's largest online only retailer * Providing QA on data completeness and accuracy on a large scale PPI redress and remediation programme for a UK retailer * Reviews of the alert handling, incident, problem and change management processes for a large retail bank; and * A technical review of the Active Directory set up at a large UK retail bank.

head of chief operating office risk

the co-operative bank plc

2017-1 - 2017-7 · 7 mos

Led the team responsible for first line Risk management in the Bank's Chief Operating Office. Risks covered: Technology, Business Continuity, Change, Information & Data, Payments and Physical/Health & Safety

head of it risk

the co-operative bank plc

2016-8 - 2017-1 · 6 mos

Led the team responsible for first line IT Risk management in the Bank

senior risk manager

the co-operative bank plc

2015-7 - 2016-8 · 1 yr 2 mos

Oversight of the management of Technology and Information Risk

it controls tester

barclays

2014-6 - 2015-6 · 1 yr 1 mo

As a member of the Technology Controls Assurance team, I spent a year as a contractor designing and delivering IT Controls testing to provide assurance that a major controls remediation programme could be closed, having brought its residual risk exposure within the group's risk appetite. Tests delivered ranged from validating security configurations on mainframe and midrange technology, to innovative data analytics reperformance work to support the completeness and accuracy of KRI Metrics delivered via an internal dashboard.