Brian Blank

About Brian Blank

Executive with experience in internal audit, Sarbanes Oxley (SOX) compliance, enterprise risk management, and business consulting, demonstrating business acumen, enterprise risk management perspective, and operational control knowledge throughout tenure. Built, managed and outsourced internal audit departments in all phases of the business life cycle and department maturity. Strengths include collaborative leadership style, risk based approach to control design, executive communication profile, and team building skills. During consulting career, served as Internal Audit Director and Asset Accounting Director as clients needed to maintain department function during transitional periods. Managed the design and implementation of changes to process and controls required for Sarbanes-Oxley compliance. Managed various internal audit and consulting projects on topics ranging from commissions payments and supply chain risks to IT security and disaster recovery plans. Most familiar with the Telecommunications, High Tech, and Healthcare Industries. Chief Audit Executive (CAE) experience: Built full scope Audit teams out of pre-existing SOX-only teams. Established risk assessment and audit planning processes. Established Audit charters that aligned to the business objectives of the enterprise. Established enterprise risk management programs from basic risk assessment to metric driven risk reporting. Hired and maintained highly qualified and respected teams. Specialties: Internal Audit, Enterprise Risk Management, IT Internal Audit, IT Security, SOX Controls and Testing, Cost Management, Project Management, Business Process Improvement

Experience

1. Head of Enterprise Risk Management

   F5

   Oct 2025 — Present

   Lead and scaled the enterprise ERM program as a dedicated second-line function, partnering with business and corporate leaders to embed risk-informed decision-making across the organization.Owned the ERM framework, methodology, and policy suite; align program design and controls mapping to NIST CSF, ISO 27001, and COSO to support consistent risk identification, assessment, response, and reporting.Established and maintained an enterprise risk framework and monitoring cadence across major risk categories (Financial, Legal & Regulatory, Strategic, Operational), including risk assessments, issue tracking, and escalation pathways.Developed metric-driven KRI/KPI reporting and executive dashboards; oversee risk register and risk treatment/management plan workflows in ServiceNow to drive accountability, timeliness, and audit-ready documentation.Owned governance operating rhythm and materials for the Board Risk Committee, Executive Risk Committee, and operational risk forums—setting agendas, curating content, synthesizing insights, and presenting enterprise risk posture, trends, and recommendations.

Education

• University of Notre Dame

  Bachelor of Business Administration (B.B.A.)

  1993 — 1997