In July 2019, Bob Phelps received an assignment with a name unlikely to quicken the pulse: Supervision System and Analytical Support. It gathered together people working on supervisory information systems, data management, business intelligence and risk analysis. For anyone interested in how a banking regulator notices a developing problem, however, the name concealed a rather interesting job. Phelps would lead the new unit at the Office of the Comptroller of the Currency. The information, the people interpreting it and the systems carrying it were being brought into closer company.
Five years later, Flagstar announced his appointment as executive vice president and special adviser to the CEO. The brief included supporting the bank’s technology capabilities alongside its existing IT leadership. Between those two assignments lies a useful way to understand his career: follow the information. Who gathers it? Who understands it? Who needs to hear about it? A bank can own considerable computing power and still have difficult questions to answer.
Phelps’s working life has taken him through bank examination, cybersecurity policy, risk leadership and advisory work. There is also a Navy career and a coaching qualification. The chronology offers fewer grand gestures than a conventional business success story. Its interest comes from the movement between responsibilities, and from the practical relationship between knowing something and deciding what to do about it.
The examiner before the adviser
Phelps joined the OCC in 1993 and earned his commission as a national bank examiner in 1998. Those dates place his later leadership appointments within a long apprenticeship to the institution. His experience included serving as examiner in charge of a midsize bank and overseeing six midsize banks as an assistant deputy comptroller. Before his responsibilities expanded across the federal banking system, they included the supervision of particular institutions.
The distinction matters to the shape of the story. An examiner’s assignment concerns an actual bank, with its own people and operations. A national risk role requires a wider field of view. Phelps’s career moved between those scales. His later work on supervisory systems added another dimension: the organization of information used by the people doing the examining. The progression can be read as a widening set of responsibilities around the same underlying subject.
- 1993Joins the OCC
- 1998National Bank Examiner commission
- 2017Supervision risk leadership
- 2019New systems and analysis unit
- 2022Senior advisory assignment
- 2024Flagstar appointment announced
Making a warning travel
In October 2017, Phelps was selected as deputy comptroller for supervision risk management. The appointment included chairing the National Risk Committee. Its assignment joined two activities that are easy to separate on paper: identifying emerging risks and communicating them across the agency and the banking industry. A finding has to travel before it can become useful to people beyond the team that produced it.
That makes communication part of the risk work itself. A warning that arrives without context can be misunderstood. An analysis that remains inside one group has a limited audience. These are general institutional problems, and the committee’s remit made the connection explicit. Phelps’s job placed him at that junction. The responsibility involved watching for changes across a system while helping others understand why those changes deserved attention.
By 2019, he was discussing leveraged lending in public. Asked about the risks, he offered a sentence with considerably less swagger than the usual business forecast: “trying to understand the risk better” The qualification is the interesting part. Understanding risk is an activity, and the wording leaves room for the work still to be done.
“trying to understand the risk better”
Bob Phelps, on leveraged lending, April 2019
The plumbing gets an appointment
The 2019 reorganization made the information problem more concrete. The OCC announced a realignment involving approximately 150 staff across two new units. Phelps was chosen to lead one of them. That figure describes the wider reorganization; it is not a headcount for his team. The change took effect on October 1 and combined functions previously located in different supervisory and policy groups.
His unit brought together systems, data and analytical work in support of supervision across the agency. The arrangement is revealing because it treats the tools and the judgments as related. Information systems are often discussed as equipment; risk analysis is discussed as expertise. Here they sat within the same organizational project. An observation still needed a route through the institution, and the route itself required attention.
The reorganization retained primary bank oversight in the existing supervisory businesses. Phelps’s new assignment concerned support for that work, with strategic direction and oversight from the Committee on Bank Supervision. The distinction prevents a misleading reading of the title. He was leading an infrastructure for supervision within a larger organization. Even the business of examining banks has an extensive backstage.
Functions brought together in the new OCC unit. A diagram of responsibilities, not a measure of results.
Cybersecurity leaves the server room
Before taking the national risk role, Phelps directed critical infrastructure policy at the OCC. His responsibilities included cybersecurity policy for regulated institutions. Flagstar’s account of his experience also describes coordination with other financial regulators. That combination puts cybersecurity into an institutional setting: technical concerns, supervisory expectations and the need for organizations to work with one another.
His subsequent private sector work kept that subject in view. Patomak Global Partners welcomed him as a senior consultant in 2023, describing assignments in regulation, governance, risk management and strategic planning, with particular attention to bank cybersecurity. The vocabulary had shifted from supervising institutions to advising clients. The subject still demanded an understanding of both the technical exposure and the organization responsible for handling it.
In August that year, he coauthored a Patomak analysis of the SEC’s new cybersecurity disclosure requirements. The article considered governance, the documentation of decisions and the complications created by overlapping reporting obligations. It was collaborative work, written with Laura Magyar, Kathy Casey, Hemal Patwa and Stephanie Moore. Its attention to process fits the career already described: discovering an issue starts another series of questions about responsibility, judgment and communication.
Read as part of his professional history, the article shows the advisory side of that expertise. It moves from the existence of a requirement to the practical decisions an organization must record and explain. The subject is less photogenic than a server rack. It is also much closer to the people who must decide what an incident means and how their institution should respond.
A commander, and a coach
Alongside the banking appointments sits a substantial period of military service. Phelps retired as a Navy commander after 29 years, primarily as an intelligence officer. He is a graduate of the Naval War College as well as the University of Northern Iowa, where he studied economics. These are distinct parts of his biography, each with a different institutional setting and course of preparation.
He also supports the U.S. Naval Academy as a Blue and Gold Officer. His professional profile lists executive education at Harvard Kennedy School in 2019, with a course description addressing the strategic and managerial challenges of regulatory and enforcement agencies. Education appears here as something that continued alongside senior responsibilities, rather than ending at the point when the first job began.
Then there is coaching. His LinkedIn profile records an International Coaching Federation Associate Certified Coach credential issued in May 2023, with a listed expiry in May 2026. Flagstar describes him as a certified coach who supports leaders in their professional and personal development. That adds a different scale to the biography again: alongside the institution and the system, there is the individual working through a decision.
The assignment inside Flagstar
In January 2022, the OCC announced that Mark Pocock would succeed Phelps in supervisory systems and analytical support, while Phelps would move into a special senior advisory assignment. By July 2024, Flagstar was announcing him among its senior hires. Its description connected his regulatory experience with a specific responsibility inside the bank: supporting improvements to IT capabilities in partnership with existing technology leadership.
The continuity is practical. He had worked on the systems used to support supervision; now his remit included technology inside an institution being supervised. The move changed the setting in which his experience would be applied. His appointment also placed him in a senior advisory role to the CEO, bringing the subjects of risk and information closer to the bank’s executive decision making.
An appointment describes work to be undertaken. Its interest does not require turning it into an invented turnaround or claiming results on someone else’s behalf. Phelps arrived with a history of examining banks, identifying risks and working on supervisory data and systems. Flagstar gave that experience a new institutional home. The title may sound broad; the career behind it is considerably more specific.
Follow the dates and a pattern emerges: examination, wider risk responsibilities, systems, then advice. Each assignment places information in a different relationship with the people who need it. The memorable moments in banking tend to arrive with announcements. Much of Phelps’s career concerns the work that precedes them, when someone is still trying to understand what the information means.