Samantha (Hui-Fang) Shih Email & Phone Number

• Developed, and implemented security standards policy and procedures to adhere to regulatory compliance as well as security best practices• Reviewed existing IT compliance controls for regulatory update and performed the necessary gap analysis• Created and maintained various assessments and compliance schedules• Oversaw and conducted internal IT control assessment activities• Identified risk assessment gaps, suggested and monitored remediation strategies• Implemented vulnerability remediation and threat management process• Led efforts for PCI certification

Greater Denver Area

Greater Denver Area

Serves as a team member on complex IT and integrated audits, working under the direction of audit leadership and management. Typically involved in activities such as the preparation of detailed programs for IT audits, security reviews, integrated audits, and data analytic procedures to determine efficiency, effectiveness and alignment with internal policies, procedures, regulations and industry standards.

Greater Denver Area

Under general supervision, perform examinations and evaluations of the adequacyand effectiveness of Denver Health and Hospital Authority (DHHA) and Denver Health Medical Plan (DHMP) financial systems of internal control. Execute projects to maintain the infrastructure for financial internal auditing policies and procedures and audit processes. Contribute to the annual internal audit plan for review and approval by the Finance Committee of the Board. Provide professional information and advice as appropriate.

Denver, Colorado

Internal Controls: Analyze internal control risks. Research and recommend internal control strategy and best practices. System Administrator for internal control software system. Develop organization system to manage accounting policies and procedures. Develop metrics to report progress on internal control projects. Project Management: Lead NREL's OMB Circular A-123 efforts including identifying and documenting entity and process risks and controls. Lead implementation of approved compliance software packages. Develop risk mitigation plans for the Accounting Group Manager and CFO. Tax Compliance: Analyze tax compliance exposure for company. Research and interpret tax law and regulations on federal, state and local levels, which include not-for-profit, payroll, and sales and use tax compliance issues. Complete and file tax forms as assigned by applicable due dates. Additional Responsibilities: Advise management on applicable tax law and internal control compliance issues. Train accounting staff in effective control risk mitigation by using appropriate internal control procedures and by guiding staff in their development, organization, and enhancement of desk procedures.

Greater Denver Area

Provides independent internal audit to all operations. Reviews and evaluates compliance with existing policies, procedures, and practices to determine whether an effective system of internal management control exists

Greater Denver Area

1. Enterprise Risk Assessment & Audit Planning• Identified potential audit areas from high level Enterprise Risk Assessment (ERA).• Developed audit programs covering various facets of financial and operational aspects of the business.2. Audit Execution & Reporting• Prepared audit survey program to identify audit objectives, scopes and methodology.• Set up entrance meeting and engagement communication to auditee describing audit objective and requesting documents.• Prepared audit and evaluation work papers, interview summaries and briefing materials.• Performed financial, operations and compliance audits independently and collaboratively, in accordance with the company policies and accepted standards.• Reported audit findings and made recommendations for correcting unsatisfactory conditions, improving operations and reducing costs.3. Audit Follow-up and Tracking• Maintained a database of outstanding audit comments to track the position responsible for taking corrective action, and the estimated completion date for corrective action.• Sent inquiries about and test the status of previously issued findings.• Reviewed and assessed the adequacy and completeness of the corrective actions and tests.• Completed the audit tracking process if no further tests needed and submitted the result to the Audit Director/Manager for review.4. Sarbanes-Oxley Compliance Assistance• Provided Sarbanes-Oxley compliance assistance, including risk assessment, testing of operation effectiveness and reporting, to SOX compliance Project Management Office when required.

Greater Denver Area

1. AML Compliance Analysis & Reporting• Conducted research and analysis of complex, critical issues concerning the patterns and trends associated with money laundering and other potential risks.• Utilized a wide variety of research tools including data analysis systems and predetermined analysis criteria to review and analyze customer and agent activity to determine if unusual or suspicious activity is occurring.• Prepared analytical reports and statistical summaries to upper management.• Prepared suspicious activity reports and filed with the governments of countries where the suspicious activity is occurring.2. Consultation & Training• Based on activity discovered and weaknesses determined, make recommendations additional agent training or the closure of agent locations.• Provided AML consultation and training to agents and affiliates.

Mba, Master Of Business Administration

#1 "Best in International Business" Full–time MBA Financial Times 2011 (5th consecutive #1 ranking) #1 "International" Full–time MBA U.S..

Education record

Education record