OpenTableSenior Director of Risk Management
Dec. 2006 - Oct. 2014San Francisco, CA• Owned, developed, implemented, and managed regulatory compliance, internal audit, internal consulting and fraud.
• Directly reported to the Board of Directors and provided independent and objective quarterly internal audit, consulting and Sarbanes-Oxley progress. • Provided in-house expertise on industry best practices across all company departments including Finance, Accounting, Information Technology, Engineering and Operations. • Designed and implemented internal audit methodology including developing the annual audit plan, documentation standards, testing approach, remediation procedures, and reporting requirements.
• Developed and executed the company’s annual risk assessment including formal presentations of the results to the Audit Committee and Board of Directors.
• Developed department’s annual budget and periodically monitored actuals against forecast. • Performed risk analysis to identify areas requiring remediation. Provided guidance and assisted with prioritization and implementation of enhanced processes and controls. • Designed and executed an approach to Sarbanes-Oxley section 302, 906 and 404 by developing documentation standards, testing approach, and remediation procedures. • Worked closely with business units providing guidance and direction for new company initiatives (e.g. software implementations, department restructurings, company acquisitions, and new revenue streams).
• Performed risk assessments on all critical external vendors (SOC reviews, risk questionnaires, discussions.)
• Managed insurance plans and relationship with insurance brokers. • Developed, implemented, trained personnel on business continuity and emergency preparedness programs.
• Worked directly with Information Technology and Engineering departments to develop and periodically test Disaster Recovery plan. Validated the plan was prioritized to ensure it aligned with current objectives.