David J. Lee, CISM
**********@*****.***
Profile
Results oriented professional (CISM) with over 14 years of global experience in financial, IT and operational risk
management. Directed teams in global IT transformations, SOX assessments, M&A divestiture, and control
sustainment initiatives. Capabilities include project management, methodology development, and business
development activities. Demonstrated industry experience with advising marquee clients in manufacturing,
consumer business, automotive, hi-tech, and, transportation. Work experience in South America (Brazil and
Argentina) and Asia-Pacific (Australia, Japan, and Korea).
Areas of Expertise
11+ years with Deloitte & Touche LLP, Senior Manager, Security and Privacy Services Practice
Global IT transformation project management
Financial (SOX 404), regulatory and operational risk management
Business process re-engineering and optimization
Merger & acquisition divestiture
Business development
Functional business process expertise supporting business process and IT control assessments
Certified Information Security Manager (CISM)
Employment Experience
Deloitte & Touche, LLP, Security & Privacy Services, Detroit MI 1998 - 2009
Senior Manager
Client Leadership:
o Global IT Transformations: Led multiple SAP projects, including offshore consultants; established security
& controls strategy, approach and implementation of business process controls, application security,
segregation of duties, and Basis / IT controls. Integrated with 3rd party vendors, functional, technical,
internal audit, and organizational change teams. Led global template roll-out of governance activities.
Developed global center of excellence function for security and internal control sustainment.
o Implementation Assessments: Directed team in strategy, approach and execution to review SAP control
environment and provided recommendations to comply with financial (SOX), regulatory and operational
requirements for multiple implementations ($25MM to $150MM implementations). Reviewed unit /
integration test results, updated end user procedures with key controls, and supervised deployment of
control and security post go-live support activities.
o Business Case: Developed business case for $15B consumer business global IT transformation focusing on
SAP security and control features to improve compliance efficiency, and cost reduction; presented results
to key stakeholders.
o Merger and Acquisitions: Performed risk management (security, controls, privacy, and data requirements)
strategy and approach for $2.5B global automotive divestiture with 800+ applications.
o Governance, Risk & Compliance: Developed and implemented segregation of duties rule set tool,
delivered training to global users, and implemented on-going process to monitor and remediate violations.
o Business Process Re-engineering: Managed team for $3B OEM supplier in business process re-
engineering project for finance, order-to-cash and purchase-to-payment processes, conducted training at 11
plants, aligned key controls with control self-assessment, documented recommendations in shared services
environment.
o Benchmarking Assessment: Global SME and led international team during business process assessment
against global leading practices for urgent SDLC tollgate; presented findings to Chairman, CEO, CFO and
CIO for a $3B global manufacturer.
o Global SOX Assessment: Performed Global Quality Assurance role from 2004 to 2006 and led business
process test activities in Korea, Brazil, Australia and the US to support SOX 404 financial reporting
compliance for $15B global OEM. Managed global resources, reported findings and recommendations.
o Business Process and ERP/IT Assessments: Led functional / technical reviews and provided
recommendations based on COSO/COBIT of e-commerce, Basis/IT/GCC (change management, SDLC,
information security, Oracle database), Revenue, Expenditure, Finance (GL, AP, AR, CO, FA, PS, period
close) and Inventory business cycles; reviewed sub optimally performing implementations and made
recommendations.
Market Leadership:
o Business Development: Led practice market channel (Deloitte Consulting, 3rd party vendors (SAP/Oracle)
GRC and identity management, public sector and healthcare) targeting. Sales activities included targeting,
RFP response and orals presentations for projects from $300k to $25MM; increased responsibilities for
sales and managed revenue of $2.8MM; directly responsible for five phases of add-on services from
$105K to $2.0MM over two years; led / participated in RFP responses totaling $84MM.
o Practice Development and Methodology Leadership: Developed and facilitated ERP business cycle and IT
courses to build regional and national practice SAP and M&A practitioner capabilities. Facilitated M&A
Risk Management at Deloitte Technical Excellence Conference.
o Client Service: Recognized by Deloitte Security & Privacy Services Leadership with Outstanding
Performance Award (2006) and Applause Awards (2008, 2007, 2006, and 2005).
Pierce, Monroe, & Associates, Detroit, MI 1996-1998
Consultant
Conducted compliance reviews of procurement and financial management processes and systems.
o
Performed operation assessments of troubled businesses and developed corrective actions.
o
Coopers & Lybrand, Columbus OH 1995-1996
Staff Auditor
o Performed reviews of government contracts over 500k using specialized software; tracked findings and
recommended corrective procedures.
Technical Skills
SAP ECC 6.0 (FI, CO, CM, MM, SD, PP, and Basis), APO, BI, SRM, GRC 4.0 and 5.3 Access Controls - Risk
Analysis and Remediation
Education/Certifications/Professional Development
Bachelor of Arts, Hanover College, Hanover, IN, 1994
Major: Business Administration, Emphasis: Accounting and Communications
Certified Information Systems Manager (CISM), Information Systems Audit and Control Association
Certified Risk Professional (CRP), Banking Administration Institute
Eagle Scout
ASAP Certified by SAP