Open to opportunities

Joseph McCormack

@josephmccormack

Message

I am a third-party risk leader improving vendor oversight and regulatory compliance.

United States

Message

What I'm looking for

I want a senior role leading third-party/vendor risk, regulatory compliance, and GRC tool optimization at a collaborative financial-services firm focused on process improvement and measurable risk reduction.

I am a results-oriented risk professional who transitioned from hedge fund accounting to third-party risk management, leveraging deep financial expertise and analytical rigor.

At Comerica I lead the end-to-end third-party risk lifecycle—due diligence, risk assessments, contract reviews, and ongoing monitoring—and partnered with legal, compliance, and procurement to reduce residual risk exposure by over 30%. I regularly use GRC platforms such as Aravo, RSA Archer, and Coupa to manage assessments and support enterprise governance across procurement, privacy, and security.

Earlier roles at KPMG and in alternative investment tax and accounting sharpened my operational discipline in ERM, audit execution, supplier validation, and performance scorecard reviews. I seek roles where I can drive measurable risk reduction, strengthen controls, and build pragmatic, regulatory-aligned programs.

Experience

Work history, roles, and key accomplishments

Current

Vice President, Third Party Risk

Current

Comerica

Sep 2024 - Present (1 year 1 month)

Lead the end-to-end third-party risk lifecycle, implementing mitigation strategies that reduced residual risk exposure by over 30% while ensuring OCC and FFIEC compliance. Partnered with legal, compliance, and procurement to manage capital markets vendors across trading, clearing, and data services.

Third Party Risk Management Risk Assessment Contract Review Aravo RSA Archer Coupa Regulatory Compliance

Risk Advisory, TPRM

KPMG

May 2019 - Sep 2024 (5 years 4 months)

Developed ERM programs, policies, and risk assessment criteria and led supplier management initiatives using GRC tools to validate supplier risk data and controls. Managed GRC tool monitoring, IA risk assessments, and performance scorecard reviews to support audit and regulatory expectations.

GRC Tooling RSA Archer Risk Assessment Stakeholder Management

Tax Supervisor

State Street Corporation

Sep 2016 - Apr 2019 (2 years 7 months)

Standardized allocation templates and executed tax reporting and filings for over 300 entities, improving data accuracy and timeliness. Trained cross-regional teams and coordinated reporting across Boston, Kansas City, China, and India.

Tax Reporting Entities Process Standardization Compliance

Senior Associate, Alt. Investments

J.P. Morgan Chase

Sep 2012 - Sep 2016 (4 years)

Prepared and reviewed K-1s, federal returns, provisions, and capital allocations for hedge and private equity funds, and managed year-end reporting including 1099s and capital gain distributions. Coordinated with international clients, auditors, and tax authorities to ensure compliance.

K 1 Preparation Capital Allocation Tax Compliance