Micki Nelson Email & Phone Number

Charlotte, North Carolina

Charlotte, North Carolina Area

• Develop, initiate, maintain and revise policies and procedures for the general operation of the Compliance Program and its related activities • Collaborate with other departments including Risk Management, Internal Audit, Information Security and Operations to direct compliance issues to appropriate existing channels for investigation and resolution• Monitor and coordinate compliance activities of other departments to remain abreast of the status of all compliance activities and to identify trends• Examine the effectiveness of established policies, standards, and procedures in assisting all levels of management in their obligation to comply with all applicable regulatory standards• Provide reports on a regular basis, and as directed or requested, to keep the Corporate Compliance Committee/Audit and Governance Committee of the Board and senior management informed of the operation and progress of compliance efforts• Work with the Human Resources Department and others as appropriate to develop an effective compliance training program, including appropriate introductory training for new employees as well as ongoing training for all employees and managers• Oversee and monitor activities for compliance with company, state and federal regulations• Monitor the performance of the Compliance Program and relates activities on a continuing basis, taking appropriate steps to improve its effectiveness• Research new and existing laws, regulations, policies, and industry standards and identify existing and emerging business practice issues and risks of company• Support direct regulatory and third-party regulatory examinations of the Company

Charlotte, North Carolina Area

• Manage and support Customer audit inquiries, questionnaires and onsite examinations utilizing appropriate supporting evidence as described or recommended within OWASP, PCI DSS, FFIEC Security Handbook, COBIT and COSO standards• Manage third-party examinations including SOC 1 and SOC 2 reports and support PCI Compliance certification and ISO 27001 Certification efforts• Utilize operational risk tools such as Archer eGRC, Hiperios 3rd Party Management Systems and Ariba SMS• Assist with coordination of Internal Audit planning, execution, and remediation activities• Provide Compliance oversight and guidance in conjunction with the Information Security and Legal teams• Assist with identification of risk management goals, objectives and metrics consistent with corporate strategic plan • Participate in annual Enterprise Risk Assessment process including survey design and execution• Enhance Enterprise Risk Assessment process to include risks identified through from business units, across business units, third party examinations, vendor risk assessments, Customer findings and recommendations and other applicable sources in addition to self-identified risks• Build a process for Management self-assessments of key business areas based on risk, threat and vulnerability identification, control identification and risk mitigation• Tracking, management and reporting of issues or key risks identified through internal audit, customer, regulatory, and third-party examinations for reporting to the Audit and Governance committee and Operating committees• Assist with the oversight, development and implementation of enterprise policy, standards, guidelines and procedures• Develop and maintain examination event tracking for trending and Executive Management reporting• Support Vendor Management oversight process including policy rewrite and execution to more closely align with current regulatory standards including provisions for third and fourth party oversight

Nashville, Tennessee

• Perform detailed process improvement audits of key business processes including risk assessment, identification of gaps and areas for improvement• Develop and implement new processes, key policies and procedures based on audits resulting in measurable, scalable goals and operational efficiencies• Perform analytics utilizing ACL, SQL, and Access to identify trends within financial and performance data• Perform IT general control and application system audits• Assist with design and implementation of control framework consistent with ISO27002 standards

Houston, Tx

• Specialized in the delivery of IT risk assurance and advisory services including IT security and privacy assessments, ERP integrity, Third-party reporting, and SAS70 attestation services• Experienced with control frameworks and standards, including COBIT and ISO 27002• Managed multiple teams of senior and staff auditors on projects including: engagement planning, budgeting, status tracking, client communications, and execution of work plans against budget and time constraints• Analyzed and documented key business processes, prepared process documentation (e.g., flowcharts, narrative, risk/control matrix), and identified and tested key controls• Analyzed and reported on journal entry, inventory, accounts payable, accounts receivable, fixed assets and payroll data utilizing ACL, SQL, Access, Monarch and internally developed software products• Audited multiple industry-specific ERPs, operating system and database platforms including: Oracle ERP, SAP, JD Edwards EnterpriseOne, PeopleSoft, Meditech, McKesson Star, Facets Mainframe, SQL, DB2, ODB, AIX, Red Hat Linux and Windows Enterprise Server• Clients included an International Healthcare Services Company, Global Home Health Provider Services Company, National Health Insurance Company, National Financial and Banking Services Company, Global Oil and Gas Company, Global Utilities Company. Global Retail and Global Financial Services Providers

Knoxville, Tn

• Processed payroll for 35 employees including shift work and variable pay for multiple private physician practices and LLC• Processed accounts payable and maintained vendor accounts• Selected and implemented a new accounting information system, including data migration and account set up• Assisted with the completion of quarterly and annual tax filings for an LLC• Assisted with configuration and data migration for a new enterprise reporting system• Assisted with configuration and implementation of a new collections management system

Executive Master Of Business Administration (Emba), Technology Management Concentration, 4.0

Bs, Accounting