Melissa Saul Email & Phone Number

Atlanta, Georgia, United States

• Advances our clients’ understanding of risk and compliance and offers both tactical and strategic support. • Provides expertise and support during internal and external audits as an audit liaison. • Assists in the implementation of technologies that enable automation and effective governance. • Provides assurance and advisory services related to GRC, risk assessments, and compliance engagements. • Evaluates third party SOC reports for compliance to system control requirements. Works closely with all levels of management and business owners to analyze processes and related controls to identify risks or compliance issues, remediate deficiencies or implement compensating controls.• Streamlines and aligns policies and procedures to foster simplicity and consistency. • Specializes in performing PCI DSS 4.0 compliance assessments, IT general controls audits, SOX, and SOC readiness assessments. • Provides IT audit assessment, advisory, and co-sourcing services to commercial clients across multiple industries.

Greater Atlanta Area

Manager, Technology Governance Team, TOS/Global Technology Services (GTS) Senior Methods and Procedures Consultant, Technology Governance Team • Supported Global Technology Service’s First Line of Defense by strengthening our control environment, supporting audits and assessments, and managing risk. • Optimized and strengthened the company’s control environment while continually updating it to align with changing regulatory requirements, changing policies and enterprise controls.• Managed and governed new technology and processed risk and the control environment by developing process flows and risk and control matrices for key business processes.Data Security Consultant III, Global Information Security Cyber Risk Remediation • Standardized the data across all risks/findings and prioritized work efforts using the Bank’s Risk Ranking Methodology. Provided oversight to the Risk Register and Findings Register for Remediation Plans. Created and reported metrics on a weekly basis to showcase our accomplishments to senior leadership. Payment Card Industry (PCI) • Facilitated and accomplished the North American and European Payment Card Industry (PCI) Reports of Compliance (RoC) and Attestations of Compliance (AoC) in an organized and systematic fashion to meet the business needs of Elavon.

Greater Atlanta Area

• Led the governance and compliance program for Information Technology General Controls. Established PCI controls attestation program. • Ensured compliance with IT controls design review and IT control self-assessments. Successfully partnered with internal/external audits for SOX compliance audits. • Designed and developed the initial PCI controls attestation program which included writing over 490 control statements for the PCI requirements, determining control owners and identifying gaps for remediation related to PCI activities.

• Governance and oversight for TSYS security assessment and compliance programs to ensure regulatory and legal requirements. • Provided oversight of TSYS business unit security assessments, vendor security assessments and application security assessments to ensure compliance with PCI, SOX, HIPAA, ISO and GLBA. • Worked extensively with PCI team to ensure a holistic approach to conducting PCI audits and information security assessments across the enterprise. • Developed and implemented FFIEC compliance program to meet compliance guidelines.