Michelle E. Hawkins, CISA
Olmsted Falls, Ohio 44138
**********@*****.***
Career Summary
An accomplished IT Auditor Professional with extensive experience in
assessing the data integrity, and reliability of information systems and
underlying business processes. Proven track record of ensuring the
adequacy of controls and compliance with company policies, procedures, and
regulatory requirements. History of minimizing costly and time consuming
problems. Possess technical, analytical and project management strengths.
Professional Experience
AMTRUST BANK/OHIO SAVINGS BANK, Cleveland, Ohio 2005 - 2008
IT Security Analyst /IT Risk Assessment
Developed and implemented risk assessment methodology and risk controls
Performed and completed 40 Risk Assessments within first year the risk
assessment process was implemented
Conducted IT Vendor Risk Assessments (current and new contracts); created a
comprehensive Standardized Controls Questionnaire for vendor reviews that
significantly improved timely collection and accuracy of information
received.
PENTAIR WATER TREATMENT, INCORPORATED, Chardon, Ohio 2004 - 2005
Auditing Consultant - Sarbanes-Oxley (SOX) Leader
Given an opportunity by Robert Half Resource Management to fulfill a 3-
month contract with the water treatment product manufacturer as an Auditing
Consultant, for an Enterprise Resource Planning (ERP) conversion project.
Offered an extension on contract to serve as Sarbanes-Oxley Leader
Auditing Consultant accomplishments
Implemented the System Development Life Cycle (SDLC) to ensure SOX
requirements were met
Developed and implemented Change Management controls
Developed and implemented test schedules, test plans, tracked test issues
and reported test results
Coordinated and worked closely with internal management and staff on
remediation steps and implementation
Sarbanes-Oxley Leader Accomplishments
Ensured compliance with SOX requirements (#302 and #404) for both IT and
financial
Developed, implemented, and performed the certification procedure and
quarterly testing requirements
Managed multiple audits and deadlines with limited supervision
Coordinated and worked closely with Financial Comptroller, business unit
managers, internal and external auditors on identification of gaps, issues,
remediation steps and implementation of controls
Received a corporate award recognizing contributions to a 'No Material
Weakness' and 'No Significant Deficiency' rating from the internal control
assessment
Michelle E. Hawkins, CISA page 2
THE SHERWIN-WILLIAMS COMPANY, Cleveland, Ohio 1999 - 2004
Senior IT Auditor
Managed and performed IT audits. Audit responsibilities included all
stages of the audit process - Planning, fieldwork, testing, and closing
Developed IT audit programs; audit reports; assisted external auditors in
year-end examinations
Conducted IT General Controls, Application Control, Security audits, and
evaluated annual Disaster Recovery Simulations
Managed IT Audit staff. Staff management experience included training,
assigning duties, and reviewing audit work.
Identified and resolved a disaster recovery weakness: resulted in the use
of an existing company facility for disaster recovery purposes and saved
$185K+annually for the company
Uncovered and resolved a weakness with the system used to report health and
regulatory information, which prevented potential fines and lost revenue of
$80K annually
Identified and resolved trademark infringement risks
Selected to give Year 2000 presentation to company service providers
NATIONAL CITY BANK, Cleveland, Ohio 1994 - 1999
Staff IT Auditor
Review, test and evaluated internal controls for information systems and
underlying business processes
Created vendor and third party assessment used for Year 2000 readiness and
integration testing
Certification
Certified Information Systems Auditor (CISA)
Education
B.A., Computer Science, Capital University, Cleveland, Ohio
Graduated with honors: Cum Laude; Dean's List; Nominated for Student of the
Year
A.A., Computer Data Processing, Sawyer College of Business, Cleveland, Ohio
Professional Affiliations
Active Member - Information Systems Audit & Control Association (ISACA)
May 2010 - CISA review course presenter - Topic: Business Continuity and
Disaster Recovery
Former Information Technology Instructor - Bryant & Stratton Business
College