Michael Heger, Cissp, Cisa Email & Phone Number

Remote

As Chevron Federal Credit Union's IT Audit Manager, I am responsible for conducting IT risk assessments, developing the annual IT Audit plan, and completing each IT audit scheduled for the year. This includes a variety of technology audits such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), Cyber Security, Infrastructure, Access Management, Robotic Process Automation, Artificial Intelligence, and COBIT.

Greater Minneapolis-St. Paul Area

With my promotion to Sr. IT Audit Consultant, I took on further responsibilities in the audit management, advisory, and risk assessment processes for our organization's IT Audit function. This included maintaining relationships with enterprise leadership to appropriately understand their risk and taking over audits as necessary. This role further expanded on my previous IT Audit Consultant responsibilities.My audit work within this role included risk assessment, control review, and audit completion for the following areas/technologies in the past year alone: Tableau, Power BI, Microsoft365, Prisma cloud vulnerability management, and enterprise robot development.

Minnetonka, Mn

As an IT Audit Consultant, also known as IT Audit Lead, I had the opportunity to take control and lead audits across the IT enterprise at UHG compared to doing standard documentation and testing in an analyst role.During this time I led the following audits within our technology environment:- 2 emerging businesses focused on IT security and access management controls- Enterprise SharePoint environment- Financial operations mobile application- Hybrid cloud configurationI was the primary communication line between the audit team and the businesses throughout these efforts.

Minnetonka, Mn

Following previous positions in UnitedHealth Group and Optum Technology I moved to a Senior Analyst position within our Internal Audit & Advisory Services group. With our information technology team, we are responsible for various audits of IT processes around the entire organization. We regularly test against standard frameworks such as NIST and HITRUST in addition to standard internal rulesets.In addition to the audits noted below, I have also regularly completed annual SOX and IT Controls for Financial Reporting testing for various systems across UnitedHealth Group. This includes testing around user provisioning, platform security, change management, and more.Some of the audits I completed in my first two years within IAAS are as follows: Network Access Control: I noted risks, controls, and processes in place surrounding the internal networks at UHG. This included testing of tools UHG utilizes and analyzing industry best practices. Non-Integrated Entity: This audit involves a review of an entity UHG has acquired but has not fully integrated into the UHG system. I managed the network security portion of the audit which included review of their data center physical security and mobile application handling. Virtual Contact Center: UHG handles millions of customer calls each year and the backbone of this infrastructure is the Virtual Contact Center which handles call direction, security, quality, and review. I managed the platform infrastructure and desktop application security review which included dives into the interactive voice response systems for Optum Technology and UnitedHealthcare. Encryption Key & Certificate Management: As the sole analyst on the audit, I reviewed UHG security practices for encryption keys and certificates including the certificate lifecycle management process for TLS/SSL and SSH certificates. This audit paved the way for modernization to the management of these keys and certificates through the company.

Minnetonka, Mn

As a Startup Operations Analyst at Optum I had the unique opportunity to work in a space dubbed the Innovation Garage. The Garage is best summarized as a startup accelerator/incubator but provided the resources of a huge organization within UnitedHealth Group. We focused on making ideas happen within the Healthcare space - the majority of which come from employees and healthcare professionals working with customers and patients every single day.The Garage was still young at this point; Only about 3 years had gone by since this idea was introduced to UHG. My role had been to help formulate metrics, improve training, and provide resource management within a budding business. While I continued to grow through personal experiences inside the Garage, I worked to improve the future and opportunities for healthcare startups as a whole.

Eden Prairie, Mn

Optum Technology is a subsidiary of UnitedHealth Group and handles all of the Information Technology related needs of the company. Optum also markets and sells their products externally to many medical systems and hospitals across the United States. My role was within this section of UnitedHealth Group.As a project analyst within the Solutions & Technology Program Management Organization I had the opportunity to work with clients externally as well as team members internally. For our team's external client, I worked on project documentation as well as attended multiple design sessions hosted by the client and our team in Minneapolis.I also had the chance to implement a new Hotfix coordination process involving external tools and client interaction. This coordination position in particular gave me the opportunity to meet with and communicate across teams and various managers to move client satisfaction in a positive direction.

Ames, Ia

The Solutions Center at Iowa State handles the University's general technologically related problems and assists in any way possible for University related software and inquiries. I spent a lot of time working with customers through their various software and networking problems in order to help them improve their educational experience. I had hands on experience assisting Iowa State students and faculty members with various problems from viruses to software errors.Following a promotion to Student Team Lead, I also supervised 4-12 employees each shift. The Student Team Lead is in charge of discipline while at work as well as answering any questions a student employee or customer may have in concerns to Information Technology Services at Iowa State University.

Greater Minneapolis-St. Paul Area

As an IT intern at UnitedHealth Group, I was a member of the United Support Center Tools and Reporting Team which helps support the United Support Center and Knowledge management teams. I participated in three separate projects with full time staff members of the UHG team as well as a summer long intern project with my team of six interns. My projects ranged from work with local applications created within UHG to work with SharePoint and project resolution.Within my summer long intern project, we were tasked with disruptive innovation for the healthcare industry and elected to offer a plan for preventative care concerning UHG members. My role was to create a Minimum Viable Product for our idea which involved a website mock-up and process development. As a team we finished 3rd overall out of 28 intern teams nationally and had the opportunity to present our idea personally to the Optum Technology Innovation Team; a group of individuals in charge of making bold ideas happen at UnitedHealth Group.

Paderno Del Grappa, Tv, Italy

As a Resident Assistant for the CIMBA program in Paderno Del Grappa, Italy, I received extensive training regarding problem and time management in order to preserve a successful learning environment on a university study abroad program. This position was also active while enrolled in two full credit courses over a four week period. From working with students on campus to office hours spent learning from the full time staff members and graduate students, this was a very rewarding experience.

Wayzata, Minnesota

As an IT Intern at Cargill, I was placed into the Grain IT team along with 3 other interns. We were assigned to redesign a Business Intelligence Portal for the Grain and Oilseed Supply Chain of North America, or GOSCNA, Business Unit within the Cargill Agricultural Supply Chain Platform. I worked in the Business Analyst position on my team where I was challenged to develop an understanding of what the end user would like to see within the newly created portal as well as track all of the data sources for the Business Intelligence Portal. Throughout the summer I networked with many individuals across various Cargill teams and developed my skills in the field of business analysis exponentially. The internship concluded with a final presentation showcasing our team's work and passing off the project to full time members of Cargill's workforce.

I supervised 15-20 games employees with ages ranging from 14 to around 80 years old. In addition to supervision, I managed a daily bank of $2,000 to $4,000 and assisted customers with their complaints, inquiries, and other various situations.