Tom is a director in Deloitte's Risk Advisory practice, and has over 12 years’ experience providing operational, regulatory and technology risk advisory services to large financial services institutions, particularly in the capital markets sector. Tom specialises in controls framework design, focusing on technology risk but with experience across a range of risk domains including financial reporting, wholesale and retail conduct, financial crime and data governance. He has experience advising on the design and implementation of assurance approaches across the three lines of defence, as well as the delivery of large-scale control assurance programmes.