Open to opportunities

Michelle Croak

@michellecroak

Message

Senior Manager specializing in technology risk and compliance management.

United States

Message

What I'm looking for

I am looking for a role that fosters innovation and collaboration, where I can leverage my risk management expertise to drive strategic initiatives and enhance organizational resilience.

I am a seasoned Senior Manager with extensive experience in technology risk management and compliance. Over the past several years, I have successfully managed the lifecycle of technology and security risk management programs, ensuring adherence to PCI-DSS standards and leading annual SOC audits. My strategic oversight of the Vendor Oversight Program has streamlined governance processes, enhancing vendor management and risk assessment across the organization.

Previously, I held multiple roles within risk management at USAA, where I built and implemented IT General Control and Business Application Control programs. My leadership in risk identification and mitigation has supported the development of innovative products and services, ensuring robust internal oversight. With a strong educational background, including an MBA from the University of Texas at Dallas, I am committed to driving effective risk management strategies that align with organizational goals.

Experience

Work history, roles, and key accomplishments

Senior Manager, Technology Risk

Avant

Jul 2022 - Feb 2025 (2 years 7 months)

Managed the lifecycle of technology and security risk management programs, including PCI-DSS Annual Audit and facilitating internal/external security/technology risk and compliance related exams & audits. Oversaw the company's annual SOC Audit, collaborating with all lines of defense to generate audit evidence and facilitate discussions with external auditors. Strategically managed the Vendor Over

Risk Management PCI DSS Risk Assessment Compliance Governance Due Diligence Stakeholder Management

Multiple Roles within Risk Management

USAA

Jul 2015 - Jun 2022 (6 years 11 months)

Built, implemented, and managed IT General Control and Business Application Control programs, serving as strategic and operational leads to ensure program effectiveness across the organization. Supported development activities from Innovation teams through risk identification, mitigation, and proper internal oversight processes. Led a team of experienced risk professionals who deployed risk progra

IT General Controls IT Application Controls Risk Mitigation Program Management Team Leadership Quality Assurance

Education

Degrees, certifications, and relevant coursework

University of Texas at Dallas

Masters of Business Administration, Business Administration

Grade: 3.83/4.0

Completed a Master of Business Administration program, achieving a Scholar of Distinction recognition. Focused on advanced business principles and management strategies.

University of Wisconsin-Madison

Bachelors of Business Administration, Business Administration

Grade: 3.54/4.0

Pursued a Bachelor of Business Administration with a double major in Marketing and Risk Management and Insurance, alongside a specialization in Healthcare Management. Gained comprehensive knowledge in business, risk assessment, and healthcare industry operations.