Michael Nickolas Email & Phone Number

Plano, Tx, Us

Responsible for SAP Security, SAP GRC Access Controls & Process Controls, and SAP ITGC & Business Process Controls• Developed, implemented, executed, and sustained multiple SAP ITGC controls and SAP business process controls for both manual control performance and CCM (continuous controls monitoring) within SAP GRC Process Controls• Devleoped and executed multiple SAP GRC and S4/Hana security & controls system sustainment and monitoring procedures• Developed, implemented, executed, and sustained SAP GRC ruleset• Managed multiple SAP security site & business unit deployments• Developed and executed multiple dashboard reporting and monitoring solutions• Implemented SAP GRC 12 upgrade from GRC 10• Developed and executed multiple training solutions for SAP GRC functionality & controls execution

Worldwide, Oo

• Managed multiple teams of on-shore and off-shore consultants responsible for SAP role design, SAP GRC 12 implementation, and SAP Controls implementation• Performed multiple SAP rule set redesign and cross application solutions• Implemented business process controls across all business and IT workstreams

London, Gb

• Lead SAP production incident monitoring and resolution processes• Manage team of consultants responsible for SAP role design and technical troubleshooting• Develop and maintain role design for 13+ SAP systems• Perform SAP ruleset redesign and analysis for firm wide SAP SOD ruleset template

Detroit, Michigan, Us

• Business owner for SAP GRC 10.1 environment consisting of 13 target connector SAP systems• Manage team of domestic and off-shore analysts responsible for SAP GRC administration, access request processing, and user provisioning• Provide technical support for all GRC components, manage service pack upgrades, and manage all enhancements• Develop and administer roles for implementation support and sustain activities• Implemented user self-service request solution enabling cost savings driven through resource & lead time reduction• Develop operations policies, procedures, reporting, & training for EAM Firefighter &user provisioning• Maintain and administer SOD rule set and mitigating controls solution• Maintain and administer semi-annual user access review certification process via Sailpoint• Develop and execute dashboard reporting: requests, users, roles, SODs, mitigating controls, & EAM FF• Administer and monitor system configuration, jobs, and processes• Provide deployment support for user onboarding • Requirements gathering for GRC Process Controls and business case development activities• Represent organization and program as liaison with end user community and audit partners

Detroit, Michigan, Us

• Perform and oversee all data analysis in support of audit services function including financial audit, operational audit, IT, special investigations and fraud, treasury management, risk management, and environmental teams• Develop and oversee special projects and continuous monitoring for cost recovery, controls, and fraud• Design and maintain access roles/profiles and reporting solutions within key business systems • Develop and oversee data analysis related training to audit services function• Develop and maintain data analytics test/procedure library• Develop and maintain internally leveraged MS SQL Server environment for analytic solutions• Project Manager for enterprise implementation of GRC (Governance, Risks, & Controls) for Audit Work Papers, Control Self Assessments, SOX, IT Compliance, & Policy Management

Battle Creek, Michigan, Us

• Developed and implemented data management maintenance processes in support of the multi-national SAP-ECC, SAP-CRM, and SAP-APO system implementation for various key data objects within the following associated business streams: Customer Service, Customer Trade & Account Management, Procurement & Vendor Management, Finance & Controlling, Manufacturing, and Materials Management• Developed interim-state data management maintenance processes in support of SAP-ECC implementation interfaces• Developed process role profiles in support of OCM activities• Developed security roles in support of Access Security activities• Developed training course documentation in support of OCM activities• Delivered training courses to end users in support of OCM activities• Developed a multi-tiered Data Governance Organization model structure for key SAP data objects for facilitating data ownership, data object change control, access security authorization, data policy/standards, data management process, and data accuracy metrics• Provided data extraction support for data cleansing and data conversion project activities• Developed WinShuttle template solutions for mass maintenance capabilities for key master data objects• Developed SAP Workflow solution with Adobe Smart Forms integration for material master data maintenance• Developed TDLinx (Nielsen) integration solution for customer master

Battle Creek, Michigan, Us

• Developed, implemented, and executed SAP data analysis strategy in support of the internal audit function for financial and corporate service centers, plants and bakeries, and the distribution center network• Developed SQL scripts within SAP SQVI & Direct Link to extract SAP configuration, master file, financial, and operational data from the underlying Oracle 8i & 9i DB tables for financial audit, operations, and security analysis• Implemented continuous monitoring program and performed SAP data analysis in support of the internal audit function, corporate projects, and the fraud prevention department for SAP application system modules and associated business processes: supply chain management & inventory & spares control, procurement, A/P, customer relationship management, trade spend deduction management, & advertising, coupon management, product diversion, general ledger & financial reporting, controlling & ION management, sales and distribution, pricing, & accounts receivable, credit management, asset management, preventative plant maintenance, travel expense, human resources, compensation, payroll, worker’s compensation, pensions, & benefits, derivatives/futures contracts• Developed Monarch models for SAP reports for financial and operational audit analysis• Planned and executed IT audit reviews for various applications, OS, and processes within the IT environment• Planned and executed reporting for security, operations, and change management reviews in support of SOX/Audit• Participated in the annual risk assessment process for determining and ranking auditable global entities• Provided assistance within the global software licensing analysis initiative• Coordinated and managed co-sourced resources for various IT audits

Davidson, North Carolina, Us

• Performed and developed /post-implementation operational reviews and security reviews of the Oracle Applications 11i E-Business Suite and MFG/PRO application system modules and processes • Developed SQL scripts to extract Oracle 11i ERP Applications configuration, master file, and transaction data from Oracle 8i & 9i DB tables for security and financial audit analysis• Performed and developed pre-implementation reviews of warranty processes within Tavant• Developed and performed extraction techniques within Navision in support of data integrity analysis reviews, financial audits, security access reviews, and configurable control reviews• Planned, performed, and assisted in reporting for security, operations, and change management audit reviews in support of internal financial audits and SOX control reviews• Performed and developed review of interfacing controls amongst middleware, web based platforms, and Oracle Applications 11i; based upon the webMethods web services environment• Developed batch scripts within ACL to automate audit procedures utilizing ACL formatted data• Developed Monarch models for Oracle 11i and MFG/PRO financial reports for audit analysis• Developed enterprise-wide IT standards of internal control in support of Sarbanes-Oxley• Developed security policies & standards for enterprise-wide Windows AD implementation• Developed Security & Group Policy templates for all platforms within Windows implementation• Integrated CIS Security Tool Suite into the IT department processes for various OS, DB, and other environments• Performed IT audit, security, and other GCC reviews of various OS, DB, and other environments• Developed enterprise wide security standards for various OS, DB, and other environments• Developed IT focused internal control templates and management testing templates based on ITIL, COBIT, and COSO in support of the enterprise-wide Sarbanes-Oxley initiative

• Performed multiple pre/post-implementation security and general computer control reviews of OS, firewalls, web applications, web servers, routers, and PBXs• Performed internal control and security reviews of various financial applications & business processes including OTC, PTP, RTR, and Payroll/HR• Performed multiple WAN/LAN control reviews, risk assessments, and network penetration probes• Performed PC & IT support role for internal audit team

Worldwide, Oo

• Performed pre/post-implementation control reviews of various firewalls and OS• Performed WAN/LAN control reviews, risk assessments, and network penetration probes• Provided consulting services for multiple clients to assess OS & application controls• Planned, performed, and assisted in reporting for security, operations, and change management audit reviews in support of external financial audits for clients within various industries• Planned and performed internal control and security reviews of various application systems and business processes • Designed internally utilized OS, firewall, and WAN/LAN audit programs and client deliverables• Developed enterprise wide security policies, standards, and procedures for clients• Designed and secured an intercompany/client web portal based on Info Image platform• Designed security for WAN/LAN network environments• Selected for and participated within the E-business Development Program (4 months) to facilitate the rollout of E-business initiatives across the enterprise

Master'S Degree, Accounting Information Systems

Bachelor Of Applied Science (Basc), Accounting