Michael Drevniak

About Michael Drevniak

Michael is a Senior Manager out of Deloitte & Touche, LLP\'s Risk & Financial Advisory practice. He has over 15 years of total work experience in the professional services industry.Experience includes financial audit support, project management, risk management, corporate governance, internal audit, contract compliance, and IT and financial risk and controls. Responsibilities include managing multiple client service teams; fostering and building positive client relationships with executives and senior management; understanding and solving client business issues and challenges; and training, developing, and mentoring practitioners.Additionally, he has obtained the Certified Information Systems Auditor (CISA) designation.

Experience

1. Advisory Senior Manager

   Deloitte

   Aug 2015 — Present

   Summary: • Lead multiple engagement teams across various project types, including consulting, risk management, operational process improvement, compliance with industry leading practices, current state assessment, financial controls and reporting, and contract compliance. Responsibilities include project management, client coordination, project scoping, resource management, issue tracking and reporting, and quality.• Conduct internal control reviews and Sarbanes-Oxley readiness services, including evaluating design of internal controls; documenting and identifying key controls; detecting internal control gaps and assisting in remediation efforts; and creating test plans and conducting testing of key controls to evaluate operation effectiveness.• Perform daily and overall project management, including scoping and budget development/analysis for projects ranging from 40 to hours. Consistently manage $3.5M+ in revenue and sales of $2M annually.Select focus areas:• Sarbanes-Oxley (SOX) Engagements: Lead engagement manager for the day-to-day and overall management of external IT audit tasks for various Fortune 500/100/50 clients, across multiple industries, platforms and systems/applications.• Statement on Standards for Attestation Engagements (SSAE16): Manage the pre-assessment, testing and development of SSAE 16, Service Organization Control (SOC) 1 reports for multiple systems/platforms.• Media Rating Council (MRC) Accreditations: Lead engagement manager over multiple Media Rating Council (MRC) accreditation engagements, against the ad impression and click measurement guidelines. Responsible for overall engagement management; developed understanding of systems, processes, and controls; and lead the presentation of results to the MRC and Internet Advertising Bureau (IAB) Audit Committees, as well as numerous industry-leading organizations.

Education

• Washington State University

  Bachelor of Arts, Management Information Systems

  1997 — 2001

Skills

• Risk Management
• Information Technology
• Auditing
• Process Improvement
• Governance
• Business Process Improvement
• Internal Audit
• Information Security
• Sas70
• IT Audit
• Business Analysis
• Sarbanes-Oxley Act
• Enterprise Risk Management
• Sdlc
• IT Strategy
• Cisa
• Internal Controls