Risk and Program Leadership Excellence & Resilience Across Regulated Enterprises
Risk Leader with proven leadership in Operational Risk, Compliance, Program Management, and Enterprise Governance within large, highly-regulated financial institutions and Fortune 50 enterprises. Specialist in Consent Order remediation, Third-Party Risk Management (TPRM), Issue Management, and Risk & Control Self-Assessment (RCSA) transformations.
Jerimy Cribbs
Enterprise Governance & Risk Leader
Led OCC/CFPB Consent Order & MRA remediation workflows with zero high-risk findings lingering.
Architected end-to-end TPRM frameworks, vendor risk assessments, oversight, and contract compliance.
Maintained ongoing examination alignment across OCC, CFPB, Federal Reserve and Internal Audit standards.
Overview
Executive Summary
Regulatory Remediation & MRAs
Extensive track record navigating complex regulatory consent orders, Matters Requiring Attention (MRAs), and critical examination findings with Federal regulators.
Program & Governance Architecture
Designs robust operational risk management (ORM) frameworks, central intake & triage workflows, key risk indicators (KRIs), and automated reporting structures.
Third-Party & Vendor Oversight
Expertise establishing modern Third-Party Risk Management (TPRM) programs, evaluating critical vendor relationships, cybersecurity posture, and SOC compliance.
Capabilities
Core Technical & Strategic Competencies
Operational Risk Management
RCSA formulation, loss event reporting, scenario analysis, risk appetite alignment, and executive KRI scorecards.
Regulatory Compliance & Affairs
OCC, CFPB, and FRB compliance strategy, policy mapping, regulatory gap assessments, and examination prep.
Third-Party Risk (TPRM)
Vendor onboarding, tiering models, ongoing monitoring, SOC 1/2 reviews, contract compliance, and concentration risk.
Central Issue Management
End-to-end root cause analysis, central intake/triage design, issue lifecycle tracking, validation testing, and SLA reporting.
AI Governance & Risk Analytics Lab
Explore automated risk assessments, regulatory gap evaluations, and issue triage architectures simulated in real-time.
1. Select Governance Scenario
Assessment Output & Governance Strategy
High inherent risk due to fourth-party dependencies and cloud hosting critical operations. Mitigations require mandatory annual SOC 2 Type II validation and quarter-end failover simulations.
Approve capital allocation for Tier 1 vendor contingency planning and review quarter-end enterprise concentration risks at board meetings.
Enforce 30-day vendor SLA remediation protocol, coordinate cross-functional failover dry-runs, and monitor vendor key risk indicators (KRIs).
Perform quarterly SOC 2 review checks, log third-party incident reports in the central database, and verify backup operational runbooks.