Michael Arnesen Email & Phone Number

Everett, Washington, Us

Bellevue, Wa, Us

Bellevue, Wa, Us

Bellevue, Wa, Us

Bellevue, Wa, Us

General IT Risk Management: Meeting with IT Directors throughout the organization to discuss and determine existing and new / emerging IT risks facing the company. Discussing risk level and remediation tactics that can be utilized to hedge or eliminate risks where warranted.Team Management and Mentoring: Managing and mentoring staff in internal audits, risk remediation activities and projects, and IT general control testing. Routinely take initiative to assist in automation projects and computer aided audit techniques that help the team be more successful. Nominated by peers as a Clearwire “Rookie of the Year” at the end of 2012.Sprint Integration: Working closely with accounting and IT to ensure processes associated with push-down and stub-period accounting and reporting were completed without error. End User Computing Tool Validation Program: Created an inventory of key items and risk ranked them. Worked across departments to collaborate ideas, create templates, and roll out an EUCT program. Received compliments on my approach from the Controller’s office and CFO. Cross-trained another individual from accounting as part of the project.IT General Controls Reliance: Worked with Deloitte to work through remediation efforts with the business. Produced quality test work to Deloitte auditors. Proposed a reliance strategy to Deloitte. Reliance by Deloitte on Internal Audit’s ITGC testing went from 0 to 66%.Policies and Procedures: Assisted in the creation of and/or revision of Clearwire’s corporate HIPAA policy, Enterprise Security Policy, Records Management Policy, and Data Classification Policy.Payment Card Industry (PCI): Certified as an ISA and helped finalize our reporting for PCI compliance for 2012. Performed general oversight for 2013 PCI certification.Other audit work performed: SDLC process review, Business Continuity Plan / Disaster Recovery review, physical security assessment, end-to-end application and process reviews, SOC1 reviews

Nominated by management to participate in the Management / Future Leaders program.Governance Risk and Compliance (GRC) software: Performed an in-depth analysis to determine the best suited vendor for a GRC solution for Group Health. Evangelized the benefits of the new software, answering questions and overcoming barriers. Managed the initial stages of the project, from vendor management / contract negotiation and statement of work analysis and definition to process analysis and design of the future state. Regulatory Communication Process: Assisted with the redesign of the regulatory communication process from an ad-hoc, one-off process to a monthly newsletter. Reviewed diverse regulatory sources for changes and updates that impact Group Health. Once identified, briefly summarized changes and compiled into a newsletter that is distributed to key stakeholders. Compliance Risk Assessment / Inventory: Redesigned the compliance risk assessment / inventory spreadsheet to make more visually appealing and less complicated to use, as well as automate the scoring and ranking process. Assisted 18+ departments undergo and complete a compliance risk assessment and met regularly to keep up to date. Helped identify key risks or unmitigated non-compliant items and monitored departments for progress in their action plans to address. Maintained strong working relationships and cultivated a sense of trust and open collaboration.Project monitoring: Sat on project teams for major initiatives, answered questions and provided general oversight to ensure compliance requirements were met. Some examples include: 5010, ICD10, Health Plan Business Transformation.Compliance monitoring: Assisted in redesign of the overall compliance monitoring program from reviewing specific items to ensuring an effective compliance program based on the seven steps outlined in the Federal Sentencing Guidelines

Bellevue, Wa, Us

Sarbanes Oxley (SOX): Assisted in executing Symetra’s SOX program during the company's first year of required compliance. Developed templates and test plans, and assisted with staffing questions and guidance. Performed detailed review. Segregation of Duties (SOD): Created templates for and initiated a company-wide segregation of duties analysis, including a cross-application SOD analysis. SAS70 Reviews: Performed SAS70 reviews and managed staff performing SAS70 reviews to ensure that the SAS70s met relevant business objectives. Initiated new procedures to streamline the process, saving the company time and external auditor's fees. Continuous Control Monitoring (CCM) and Data Analytics: Assisted in the creation of a Continuous Control Monitoring and Data Analytics function within the Audit Services group aimed at assisting business lines with automating controls and analyzing their data through the usage of the ACL application, SQL server, Access, and Excel. Project Monitoring and Post-Implementation Reviews: Assisted in the creation of a Project Monitoring function within the Audit Services group aimed at assessing the adherence of capital IT projects to Symetra standards during any given phase. Operational Audits: Identified risks, scoped, managed, performed and reported on reviews over operational performance to help the company identify areas of improvement. In addition to managing internal staff, also oversaw the work of various specialized contractors with expertise in broker/dealers, life insurance product pricing, business continuity planning, and data forensics. Compliance Audits: Performed detailed research and familiarized self with relevant regulations. Identified risks, scoped, managed, performed and reported on management's adherence to compliance objectives. Compliance areas reviewed include: Anti-Money Laundering (AML), Business Continuity Planning, and privacy (PII)

New York, Ny, Us

Project Administration: Assisted in the administration and management of the staffing and budgets for multiple SOX and SAS70 engagements. Executed client kickoff and status meetings, and excelled in ensuring appropriate client involvement and satisfaction. Consistently received excellent feedback from clients and engagement team members and KPMG management. SAS 70: Completed Type II SAS 70s for various institutions. Evaluated business processes and system controls of the institutions to assure that internal controls supporting the use of services by outside vendors were adequate. Information Systems Audits: Developed test plans, performed and coordinated IT general controls and automated business process controls reviews in support of the financial statement audits for both public and non-public companies. Identified recommendations to address deficiencies. Work included both small and fortune 500 companies in the following industries:  Financial services Timber and forestry products Health-care services Transportation and freight services Internet servicesPerformed an SAP authorization and segregation of duties audit for a fortune 100 company utilizing the CSI tool.

Master'S Degree, Management Information Systems

Education record