Michelle Croak, Arm-E, Crisc, Cgeit Email & Phone Number

Build, implement, manage and lead technology & security risk management programs within second line of defense; these programs include PCI Compliance, facilitating internal and external security and technology risk/compliance assessments, advising and consulting on control design and operating effectiveness, alongside other core risk management practices and activities. Partner with other lines of defense to implement consistent risk management programs and practices. Manage company’s Annual SOC audit, partnering with all lines of defense across the company to generate Audit evidence and facilitate discussions and meetings with external auditors.Strategically lead the Vendor Oversight program for Avant, creating an easy-to-use governance process that risk rates vendors, performs needed due diligence and oversees vendors during their lifecycle.

Build, implement, manage and lead technology & security risk management programs within second line of defense. Partner with other lines of defense to implement core risk management programs and practices. Manage company’s Annual SOC audit, partnering with all lines of defense across the company to generate Audit evidence and facilitate discussions and meetings with external auditors.Strategically lead the Vendor Oversight program for Avant, creating an easy-to-use governance process that risk rates vendors, performs needed due diligence and oversees vendors during their lifecycle.

Led team of risk professionals who deploy risk programs, including Process, Risk and Control Inventory documentation and Quality Assurance/Monitoring Controls, throughout large and diverse first line function.

Chicago, Illinois, United States

Led implementation of multiple risk and control governance programs across the entire organization. Served as subject matter expert on governance programs in multiple forums, including management, to ensure aligned execution and progress towards goals.

Led implementation of multiple risk and control governance programs across a diverse group of functional areas, including Information Technology (IT), Security, Procurement and Digital Experience.

Supported development activities from USAA Labs (Innovation) teams, including new, modified or expanded products, services, platforms and other enhancements, through risk identification, mitigation and proper internal oversight processes. Assisted USAA Labs with first line of defense responsibilities, such as issue identification and management, risk and control self-assessment (RCSA) management and control partner/regulator exams.

San Antonio, Texas Area

Supported lines of business, including Digital Experience, Innovation (USAA Labs), Chief Design Office and Data & Analytics Office, through risk identification, and understanding/managing risks through appropriate practices and processes. Aggregated data and information to make and publish reports to a management-level audience. Assisted lines of business with building Risk and Control Self-Assessments (RCSAs) and effectively challenge when necessary. Performed independent assessments of operational practices and gave overall opinion on risk and control environments.

San Antonio, Texas Area

Supported lines of business, including Enterprise Strategy and Marketing areas and later, Digital Experience, through risk identification, and understanding/managing risks through appropriate practices and processes. Aggregated data and information to make and publish reports to a management-level audience. Assisted lines of business with building Risk and Control Self-Assessments (RCSAs) and effectively challenge when necessary. Performed independent assessments of operational practices and gave overall opinion on risk and control environments.Performed a reputation risk scenario analysis, including setting the scenario, assumptions and other relevant information. Presented findings to a management and executive level.

San Antonio, Texas Area

Supported lines of business, including Enterprise Strategy and Marketing (ESM), through risk identification, and understanding/managing risks through appropriate practices and processes. Aggregated data and information to make and publish reports to a management-level audience. Assisted lines of business with building Risk and Control Self-Assessments (RCSAs) and effectively challenged when necessary. Performed independent assessments of operational practices and gave overall opinion on risk and control environments.

Madison, Wi

Met with students to discuss our leadership certificate. Responded promptly to emails from interested students, student organizations and other parties. Communicated with BBA Student Life and other professional staff to get tasks and project assignments to completion. Led workshops with curriculum based on learning objectives of the Accenture Leadership Center. Wrote two pieces of curriculum for workshops that pertained to leadership styles, and power and leadership. Trained to work at BBA Program office front desk to answer phone calls and walk-in questions regarding all aspects of BBA Undergraduate Program.

Madison, Wi

Led two 75-minute classes per week. Helped students adjust to new life and education in the Wisconsin School of Business. Worked cooperatively with other facilitator to plan out weekly classes. Met weekly with other facilitators and staff to better the new course.

Madison, Wi

Managed email correspondence with members to deal with attendance issues. Created, kept and maintained Excel spreadsheet keeping track of attendance to practice, socials and tournaments. Attended weekly executive board meetings to discuss different matters affecting team.Started Tournament Planning and Coordination Committee: -Tennis team plans and run Graham Slam every year.-I started the planning committee, which helps members of team become more involved in planning and execution of tournament duties. -Accepted applications for committee; was the executive board member in charge of leading and advising committee.-Liaison between committee and executive board.

San Antonio, Texas

Gathered and analyzed data on call center metrics. Published weekly reports with custom built heat maps and highlights on current trends within different call center departments. Worked with small team on ad hoc projects for strain within call center; presented findings to executives.

Madison, Wisconsin Area

Helped employees in the department complete assigned tasks. Used accounting system and practices to track expenses. Worked on projects independently, thoroughly and without much supervision.

Madison, Wisconsin Area

Managed groups of 25-50 people and led them to designated activities. Communicated with superiors to make sure agenda is completed in timely manner. Coordinated pre-planned field trips to ensure enjoyment for both grandparents and grandchildren participants.

Master Of Business Administration (M.B.A.)

Scholar of Distinction

Bachelor Of Business Administration (B.B.A.), Marketing; Risk Management And Insurance; Healthcare Management Specialization

High School