Brian Dupree

Risk and controls executive with 12+ years leading enterprise risk, technology risk, operational risk, audit, third-party risk, issue management, and regulatory remediation across financial services and technology environments. Recognized for translating 2LOD frameworks into practical 1LOD operating routines, strengthening control ownership, improving governance discipline, and preparing organizations for audit and regulatory scrutiny. Experienced across Comerica, Santander, Transamerica, USAA, Citibank, Fannie Mae, and Bank of America.

VP, Business Risk & Control Officer, Enterprise Technology & Operations - Comerica Bank

(2024-11)

• Lead 1LOD risk oversight for Enterprise Technology & Operations, including risk identification, assessment, mitigation, monitoring, escalation, and executive reporting.
• Translate 2LOD frameworks, policies, and standards into business routines that strengthen risk culture, control ownership, regulatory readiness, and governance discipline.
• Validate control design and operating effectiveness while providing credible challenge aligned to risk appetite, audit expectations, enterprise policy, and remediation quality.
• Lead issue management for self-identified, audit, 2LOD, and regulatory issues, including milestone tracking, root-cause validation, extensions, loss events, and horizontal control gaps.

VP, Third Party Business Risk Analyst Lead - Comerica Bank

(2024-04 - 2024-11)

• Led third-party risk oversight, regulatory inquiry support, audit response, and compliance execution across assigned business lines.
• Advised 1LOD partners across vendor planning, due diligence, contracting, monitoring, termination, and offboarding; facilitated SOC 1/SOC 2 reviews and risk assessments.
• Partnered with business units to implement regulatory changes, improve procedures, reduce cycle times, and strengthen management reporting.

GRC Senior Business Control and Risk Manager, IT Risk Lead - Santander

(2021-10 - 2024-03)

• Led IT risk and GRC activities for application inherent risk assessments, data classification, access governance, framework adherence, and risk-rating automation.
• Drove remediation for SOX and inherent-risk audit processes; partnered with 2LOD on policies, standards, exceptions, issue validation, and governance escalation.
• Supported quality assurance documentation, reporting, program updates, and managed application access verification through SailPoint-controlled environments.

Program/Project Management Lead, Bank PMO Risk Governance - USAA

(2020-09 - 2021-03)

• Led PMO risk governance for MRA and consent order execution, coordinating milestones, deliverables, accountability routines, and regulatory readiness.
• Managed examination readiness, SOX control remediation, audit testing, and process-control analysis across retail and consumer banking operations.
• Applied value stream mapping, Agile/Scrum, and risk framework design to improve target-state processes and product lifecycle controls.

VP, Risk Control Assessment / Program Manager - Citibank

(2015-07 - 2019-09)

• Led QA Framework and Manager Control Assessment programs for Mortgage and Retail Services, documenting processes, risks, controls, testing methods, and monitoring routines.
• Managed credit risk policy and change initiatives aligned with corporate policy, GCCFRP expectations, and regulatory requirements.
• Partnered with Legal, Compliance, Operations, Technology, Audit, Independent Risk, OCC, CFPB, and FRB on exams, validations, governance forums, and remediation.

Risk Consultant - Navigant Consulting / Chase

• Led RCSA testing, control validation, risk assessment, consent order remediation, workflow gap analysis, and closure planning.

Risk Analyst - Fannie Mae

• Performed RCSAs, incident reviews, root-cause analysis, regulatory change implementation, and Duplicate Payment initiative project management, reducing costs by 18%.

Risk, Operations, Product Strategy, Compliance, QA/QC, and SOX Audit roles - Bank of America Home Loans

• Held progressive risk, operations, product strategy, compliance, QA/QC, and SOX audit roles; improved underwriting performance by 7%, business continuity and efficiency by 15%, and delivered more than $800K in savings through process reengineering.

MBA - Finance - University of Phoenix

BA - Management/CIS/Accounting - Dillard University