Scott Phinney Email & Phone Number

Minneapolis, Mn, Us

San Francisco, California, Us

Minneapolis, Mn, Us

• Established the company’s Technology Risk Office organization through analyzing Gartner research, partnering with KPMG, CIO and executive teams, and synthesizing industry references including COBIT and SOC2• Designed and implemented new quarterly processes for Technology-wide control self-assessments, testing and certifications to promote and measure control performance and remediation across Technology organization, including quarterly meetings with each CIO direct report to discuss results, sync on focus areas and solidify relationships• Hired, trained and coached a highly engaged team of 8 subject matter experts overseeing risk and internal controls• Championed organizational cultural change through broad based education with an emphasis on proactive risk philosophies, leveraging CIO and CIO direct reports to influence employees through effective communication• Led standing Technology Risk Forum with leaders from 8 Technology organizations to discuss risk management initiatives, share best practices and collaborate on common areas of interest• Supported the achievement of clean SOC2 reports and positive results from regulatory exams• Established technology risk catalog, a comprehensive repository of key technology risks assigning ownership to specific executive leaders to ensure proactive management to prevent risks from becoming events• Designed and implemented talent development staffing model to drive quality, accountability and engagement resulting in minimal turnover

Minneapolis, Mn, Us

• Led team of 4 direct reports in United States and total team of 26 globally with oversight of IT internal audit in the assessment, review, consultation and resolution of technology and security risks• Established new audit team of 12 resources in Bangalore generating a 50% reduction in total headcount expense• Designed and implemented cross-functional processes to streamline project prioritization and quality of deliverables for the IT internal audit organization• Orchestrated a successful 40,000-hour IT audit plan covering technology and integrated audits within Target’s retail and financial services operations• Reduced open headcount from 40% to 5% through effective hiring strategies, talent development and leadership

Worldwide, Oo

• Led teams on information technology risk and controls engagements for various Fortune 500 enterprises • Delivered SOX IT controls reviews and SAS 70 engagements covering IT and business process assessments• Led 20,000-hour engagement at UnitedHealth, $100B Fortune 20 company with 20 resources across the nation• Recognized and served as Deloitte’s Midwest internal controls SME and national trainer for new consultants

Managed high-profile technology projects at this 900 employee law firm across 8 offices. - Systems Implementation. Managed project lifecycle from RFP through contract negotiations to post implementation support of a firm-wide time entry system (Carpe Diem). Lead a 32-person geographically dispersed team in evaluation, selection and implementation. Directed firm and vendor programmers in development of custom functionality and reporting in SQL Server 2000 environment. Generated positive ROI within 6 months and increased revenues of $1.4M.- Project Management. Completed HR/Payroll system implementation selection (Ceridian eSource) with a 10-person cross-functional team from two offices with oversight of cost analysis, process flows & vendor contracts, including SLA’s. - Application Reports. Mentored a team of SQL Server, Crystal reports and Access programmers in the development of applications and financial reports to streamline information and provide more detailed understanding of results.

Served as audit and risk manager at a $600M retail company and 35 other public & private companies. Presented results and delivered reports to client executives on IT strategic planning, infrastructure design, security and IT controls.

Sold B2B Internet portals at Internet start-up Software Company that went out of business.

- IT Consulting. IT Audit Manager at $20B High Tech business with a team of 5 project managers and 30 staff across 5 US offices. Instituted highly aggressive risk management approach to measure, manage and minimize project risks. Recommended control enhancements covering application development, system security and data center operations while maintaining project timelines and delivering 5% under budget.- Risk Assessment. Risk consulting manager for $50B financial services entity for a quality assurance engagement of client’s data conversion process. Decreased project risk by shaping process improvements for conversion specifications, conversion testing, operating procedures, automated/manual data conversions & system acceptance. - Software Development. Delivered recommendations for quality enhancements and process improvements surrounding user acceptance testing, methodology content, project plans and ROI calculations for a $6B retail company. Drove the team’s analysis of client software development lifecycle methodology across 11 projects enabling business to deliver software solutions more efficiently and effectively.

Managed large commercial loan relationships at former 7th largest financial holding company in the US.- Financial Services Experience. Completed 12-month highly competitive corporate Management Training Program. Promoted 5 times in 4 years.- Commercial Lending. Managed 40 high-risk million-dollar commercial loan relationships. Devised and presented strategies and action plans to senior management. Drafted detailed reports analyzing financial standing of companies across various industries.

Master Of Business Administration (Mba)

Master Of Science (Ms), Management Information Systems

Bachelor Of Arts, Economics