David Spollen is a Director in EY’s Financial Services Consulting department focusing on Operational Resilience, Third Party Risk Management and Technology Risk Management. He previously worked as Head of Technology Risk in a pillar Irish bank as well as Head of Technology Risk Consulting in another Irish professional services firm.

David has 15 years of professional services and industry experience, primarily in Financial Services in Europe across Banking and Capital Markets, Insurance and Asset Management sectors.  He has extensive experience in Operational Resilience, Cyber Security, Third Party Risk Management and Technology Risk Management where his work has covered regulatory, audit and specialist consulting services including Skilled Person Reviews.

He has a teaming leadership style, values-driven behaviour and authentic personality.  One of his focus areas is the design and delivery of IT Risk Management services for IT functions as well as embedding robust IT Risk Management into digital transformation programmes.

Skills & Expertise

• Operational Resilience
• Technology Resilience
• SWIFT CSP Independent Attestations
• Third Party Risk Management (including third party risk frameworks development and implementation)
• Technology/Cyber Risk Management (including IT risk operating model development and implementation)
• IT governance model development and implementation
• IT Internal Audit
• IT External Audit
• Service Organisation Control Reporting
• Compliance and Regulatory Assurance