Summary
Overview
Work History
Education
Skills
TECHNICAL SKILLS
Websites
Affiliations
References
Timeline
Generic

Andrew Carey

Madison Heights

Summary

Results-driven Senior Enterprise Risk Analyst at Comerica Incorporated with expertise in SOX compliance and operational risk management. Proven track record in leading risk management projects and enhancing audit performance. Adept at vulnerability management and fostering team collaboration to achieve strategic objectives. Recognized for creating impactful dashboards that streamline risk oversight.

Overview

10
10
years of professional experience

Work History

Senior Enterprise Risk Analyst

Comerica Incorporated
Auburn Hills
06.2021 - Current
  • Oversees the technology risk portfolio for the Business Information Office department. Analyzes risk and mitigating controls to remediate IT audit issues for over 200 technology applications.
  • Developed and maintained regulatory compliance documentation by creating comprehensive issue closure packets, collecting detailed evidence, and validating alignment with internal control frameworks in Archer GRC.
  • Conducted "first line of defense" (1LOD) control testing using the NIST cybersecurity framework and Qualys vulnerability management, ensuring a robust security posture and compliance.
  • Works with Product Technology Owners to review and close ServiceNow, PEN Testing, and SNYK app vulnerabilities.
  • Monitored Key Risk Indicators (KRIs) through ServiceNow, Power BI, and Archer dashboards; utilized Power BI for data profiling, query editing, and developing actionable visuals to improve reporting accuracy and insights.
  • Performs audit testing on SOX applications and SOC 1/SOC 2 reports prior to external audit testing.
  • Monitored changes in regulatory environment and assessed its impact on risk profile.
  • Reported findings on risk exposures to senior executives and the board of directors. Created dashboards for tracking metrics associated with operational risks.
  • Lead and executed risk management projects to identify deficiencies and possible corrective actions.

Senior Internal Auditor

Comerica Incorporated
Detroit
06.2016 - 05.2021
  • Conducted operations audit fieldwork to test that processes, controls, and procedures were operating effectively.
  • Used ACL (Audit Command Language) to obtain population and sample selections that would efficiently determine the effectiveness of controls in place.
  • Performed additional SOX audit engagements of business functions that qualified.
  • Analyzed financial data to detect irregularities or discrepancies in accounting records.
  • Provided detailed, yet understandable risk and compliance concepts to key stakeholders in organization.
  • Managed and trained team members to enhance audit department performance and increase operational efficiency.

Business Technology Intern - Go-System Tax Product

Thomson Reuters
Ann Arbor
12.2014 - 08.2015
  • Developed a deep understanding of the Go-System Tax product to assist CPAs across the U.S. in using the software.
  • I worked in a customer-facing tech support role to gain real-world experience as an intern.

Education

BS - Business Administration

Central Michigan University
Mount Pleasant, MI
05.2016

Skills

  • SOX compliance standards
  • Audit and control detailed testing
  • Risk assessment & operational risk management
  • SOC 1 reporting, SOC 2 reporting
  • Microsoft Office
  • Interpersonal portfolio management aptitude
  • Project management & leadership ability
  • Information lifecycle adherence & regulatory compliance
  • ServiceNow management and dashboard creation
  • Technology risk oversight & vulnerability management
  • Incident Response and Root Cause Analysis

TECHNICAL SKILLS

Tools: ServiceNow, Resolve, Sharepoint, Microsoft Office, Privileged Access UAR, Amazon Web Services

Data Analytics: Microsoft Power BI, Archer GRC, Audit Command Language

Technologies: Cloud Data Management, Active Directory, Solarwinds

Affiliations

  • Building Computers
  • Video Editing in the Davinci Resolve Software
  • Language learning tools, (Dutch & Spanish)
  • Tabletop Roleplaying

References

References available upon request.

Timeline

Senior Enterprise Risk Analyst

Comerica Incorporated
06.2021 - Current

Senior Internal Auditor

Comerica Incorporated
06.2016 - 05.2021

Business Technology Intern - Go-System Tax Product

Thomson Reuters
12.2014 - 08.2015

BS - Business Administration

Central Michigan University

Similar Profiles

CREATE PROFILE