Russ leads Baker Tilly’s financial services risk advisory practice in the New York Metro area, as well as Baker Tilly’s digital assets practice. He has more than 18 years of experience in serving financial services, digital assets and technology organizations navigate their governance risk and compliance expectations, specializing in IT risk and cybersecurity. Russ has led a broad array of projects, including regulatory examinations, internal controls advisory, internal audit, cybersecurity and regulatory compliance consulting, information technology audit and risk assessment, vendor risk management, enterprise risk management and SOC 1/2 reporting.

Russ leads Baker Tilly’s financial services risk advisory practice in the New York Metro area, as well as Baker Tilly’s digital assets practice.

Bachelor of Science in accounting
Ramapo College (Mahwah, New Jersey)

American Bankers Association Compliance School – depository and lending modules

Leads Baker Tilly’s IT and cybersecurity examinations practice, executing IT and cyber examinations on behalf of more than 30 state departments of insurance

Oversees planning, execution and client management for a wide variety of complex governance, risk, IT, compliance and regulatory projects

Collaborates with clients to prepare for IPO readiness, design and implement enterprise risk management (ERM) programs, conduct Sarbanes Oxley (SOX) control gap assessments, execute SOX programs

Executes internal, compliance and SOX audit plans in a fully outsourced and co-sourced capacity for insurance companies (P&C, life and heath), financial institutions and national securities exchanges

Trains financial services regulators and examiners on how to conduct examinations addressing emerging regulations 

Assists clients in mapping business processes to regulatory and industry guidance including SEC, NIST, FINRA, CFTC, IOSCO, NY DFS, NAIC, NIST, ISO, COBIT, GDPR, CA CPA, etc.

Leads SOC 1/2 readiness assessments and examinations with financial services clients

Designs and executes tests of incident response, disaster recovery and business continuity plans

System & Organization Controls (SOC) Reporting

Thanks for the message