Michelle Walker

About Michelle Walker

Passionate GRC Professional who loves audits and assisting in risk mitigation to help the organization reach its business objectives!Experience includes:Audit Management: Support internal and external audits (FFIEC/OCC/SOX/PCI/GCC/SOC/TQS#5/MAR). Assist with RFIs, testing, and the development of management action plans. Development, enhancement, and maintenance of IT, Information Security, and Business controls to ensure compliance. Manage audit findings and associated remediation plans to ensure risks are appropriately addressed and remediation is timely completed. Development and deployment of IT and Security policies, standards, and procedures to mitigate audit findings as well as integrate security requirements in day-to-day IT and business operations and processes.Risk Management: Evaluate security controls to ensure effectiveness and compliance with the information security program and compliance requirements. Assist control owners to align control procedures with standards and policies. Develop control procedures, findings, and remediation plans process flows/requirements for Archer implementation. Map current control procedures to Process-Risk-Control structure to ensure appropriate alignment with Risk Management risk and control repository.TPRM Program: Conduct security surveys and vendor audits. Respond to external third party requests. Extensive negotiation and review of technology contracts and agreements. Effectively conduct third party risks assessments, evaluate audit reports and security documents ensuring regulatory compliance, most notably SOC and PCI. Legal Department engagement ensures appropriate language in vendor contracts. Develop due diligence assessments related to mergers, acquisitions, and divestitures.Exception Management: Develop and manage of policy exception process for IT and Security business practice irregularities and non-compliance. Timely management to ensure remediated or extension with updated requirements and approvals.Business Data Steward providing appropriate data classification for business language and data elements across the enterprise, including developing and deploying policy.

Experience

1. Director, Audit and Due Diligence Compliance

   BioCatch

   Jan 2023 — Present · Glendale, AZ, US

Education

• Grand Canyon University

  Master of Science - MS, Information Technology Management, Summa Cum Laude

  2019

• University of Phoenix

  Bachelor of Science (BS), Information Technology, Summa Cum Laude

  2012

• UCLA

  Bachelor of Science (BS), Business Administration

Skills

• Program Management
• Vendor Audit
• Vendor Management
• Microsoft Excel
• Powerpoint
• Supplier Risk Management
• Ms Project
• Glba
• Management
• 3rd Party Security
• Pci Dss
• IT Security Assessments
• IT Security Policies
• Project Management
• IT Grc
• Computer Security
• Security Policy
• IT Audit
• Business Analysis
• Process Improvement
• Strategic Partnerships
• Managing Project Budgets
• Analysis
• Sarbanes-Oxley
• Project Portfolio Management
• Risk Management
• Six Sigma
• Security
• Information Security Standards
• IT Security Best Practices
• Iso 27001
• Risk Assessment
• Sarbanes-Oxley Act
• Information Technology
• Governance
• Secure Sdlc
• Pmo
• Sharepoint
• Information Security
• Leadership