Michael Herges Email & Phone Number

Saint Paul, MN, US

Riverwoods, IL, US

St. Louis Park, MN, US

• Implemented a third-party risk management program designed to enhance vendor risk mitigation strategies and improve efficiency throughout the vendor life cycle.
• Fostered cross functional collaborations with vendor owners to assess business requirements and develop risk management strategies that align with company objectives.
• Designed and developed a comprehensive risk monitoring system within ProcessUnity software.
• Responsible for business continuity Subject Matter Expert (SME) duties including process reviews for vendors and internal business functions.
• Led Business Impact Analysis (BIA) discussions with process owners to ensure business continuity controls have been implemented.
• Coordinated reviews of SOC 1 reports for critical vendors in the financial reporting process.

Houston, TX, US

• Built and launched an improved and sustainable Vendor Risk Management (VRM) program committed to managing risk through the vendor's life cycle, from onboarding to termination.
• Performs the responsibilities of the financial subject matter expert (SME), which includes reviewing a vendor's financial statements to assess financial stability.
• Designed a tracking system to monitor and report trends to management for vendor complaints and performance oversight.
• Ensure compliance with regulatory entities by providing required reporting and additional context for all inquiries, as needed.
• Provides oversight for new vendor records in the accounts payable system to ensure all vendors are reviewed by VRM.
• Assume all Vendor Risk Analyst duties.

Houston, TX, US

• Conduct initial, reassessment, and on-site reviews of vendors to mitigate the inherent risk of contracting with a third-party to perform services on behalf of the company.
• Collaborate with business continuity, information security, compliance, legal, finance, and client management SMEs to complete reviews.
• Coordinate with the legal department, business unit, and the vendor to onboard new vendors, amend existing vendor contracts and terminate vendor relationships.
• Maintain and report on engagement details for internal/external audits and strategic initiatives.

US

• Be an ambassador for the team as the first point of contact for the VRM group; responsible for all requests coming to the group inbox.
• Assess all incoming vendor requests to determine the appropriate risk level and route for internal review.
• Responsible for completing vendor reviews on all medium and low risk requests.
• Collaborate with team members to provide input for the development of procedures.