Experienced Internal Auditor with 3.5 years specializing in SAP ITGC, SOX 404, and SOC 1 audits. Skilled in evaluating access, change, SoD, Powerful profiles, Firefighter ID access and operational controls in S/4HANA. Strong in audit coordination, remediation, and COSO/COBIT frameworks. Results-driven auditing professional with extensive experience in evaluating internal controls and risk management. Known for strong analytical skills and attention to detail, ensuring compliance with industry standards. Collaborative team member with a focus on achieving organizational goals and adapting to dynamic environments.
Overview
4
4
years of professional experience
1
1
Certification
2
2
Languages
Work History
Internal Auditor - SAP ITGC
Einstix Technologies Pvt Ltd
Hyderabad
11.2021 - Current
Performed SAP ITGC testing covering access, change, and IT operations controls, Firefighter access review, FFID Log review, Powerful profiles review, and SoD analysis
Conducted SOX 404 and SOC1 walkthroughs, testing, and workpapers preparation.
Executed user provisioning, de-provisioning, SOD analysis, and privileged access reviews for boht ITGC and SAP ITGC controls
Reviewed change management processes to ensure compliance with policy and control design.
Supported quarterly control self-assessments and tracked remediation of deficiencies.
Proven expertise in designing and implementing IT audit and compliance programs, with a strong background in SOX, ITGC, and ISO 27001, ensuring regulatory compliance and risk mitigation.
Skilled in performing comprehensive control testing and evaluation, identifying control deficiencies, and providing actionable remediation recommendations to stakeholders, ensuring design effectiveness and operating efficiency.
Successfully implemented process improvements to enhance SOX testing efficiency, resulting in reduced review time and improved financial reporting accuracy, demonstrating ability to drive process excellence.
Experienced in managing and coordinating internal and external audits, including quarterly, semiannual, and annual audits, ensuring timely issue resolution and stakeholder satisfaction.
Proficient in leveraging IT systems and tools, including Service Now and SAP, to retrieve data, perform audit testing, and analyze results, with strong knowledge of IT frameworks like COBIT, COSO, and NIST
Adept at identifying and mitigating IT risks, ensuring compliance with regulatory requirements, and aligning with industry standards and best practices, while protecting organizational assets and reputation.
Proven expertise in evaluating and testing IT general controls, including access management, change management, and IT operations controls, ensuring design effectiveness and operating efficiency.
Delivered IT risk management and internal controls training as well as Monitored emerging IT technologies and risks.
Implementing ITGC reviews for compliance verification with professional standards and sox provisions.
Ensure the work is performed with high quality and completed within the agreed turnaround time.
Communicating the observations or gaps identified during the controls review/IT Audit to the senior auditors.
Support IT Teams with the remediation of IT Audit observation
Working on IT Audit/Consulting engagements for clients across different industries, sizes, technology and complexity.
Assist with documentation of ITGC and financial process controls including performing walk-throughs and reviewing the testing of controls.
Successfully implemented process improvements to enhance SOX testing efficiency, resulting in reduced review time and improved financial reporting accuracy, demonstrating ability to drive process excellence.
Documented recommendations to improve internal controls.
Produced audit reports.
Participated in special projects as requested by senior leadership, providing subject matter expertise on internal controls and risk management practices.
Provided valuable insights to management by presenting clear and concise audit findings, contributing to informed decision-making processes.
Supported management in developing action plans to address identified issues, promoting timely resolution of audit findings.
Assisted in the preparation of audit reports that clearly communicated findings and recommendations to key stakeholders.
Reviewed and identified risks, analyzed controls and tested compliance.
Evaluated compliance with regulatory requirements, mitigating potential risks and protecting organizational reputation.
Performed internal audits of financial and departmental operations, developing risk assessments and conducting process walkthroughs for compliance with documented processes.
Explained risk and compliance concepts to managers and executives.
Conducted training sessions for staff members on best practices in internal auditing, fostering a culture of continuous improvement.
Enhanced stakeholder confidence with preparation of clear and detailed audit reports.
Improved operational effectiveness, analyzing and recommending optimizations for supply chain processes.
Increased awareness of risk management principles, organizing workshops for department heads and management.
Elevated team performance by leading training sessions on best audit practices and regulatory compliance.
Guided departments in developing remediation plans based on audit findings and recommendations.
Developed strong working relationships with external auditors, facilitating efficient communication during annual audits.
Assisted in the development of company policies and procedures, promoting a strong internal control environment.
Enhanced internal control systems by conducting thorough risk assessments and implementing effective audit recommendations.
Experienced in managing and coordinating internal and external audits, including quarterly, semiannual, and annual audits, ensuring timely issue resolution and stakeholder satisfaction.
Proficient in leveraging IT systems and tools, including Service Now and SAP, to retrieve data, perform audit testing, and analyze results, with strong knowledge of IT frameworks like COBIT, COSO, and NIST.
Adept at identifying and mitigating IT risks, ensuring compliance with regulatory requirements, and aligning with industry standards and best practices, protecting organizational assets and reputation.
Proven expertise in evaluating and testing IT general controls, including access management, change management, and IT operations controls, ensuring design effectiveness and operating efficiency.
Coordinated with clients and auditors to streamline testing and ensure timely issue resolution.
Created audit workpapers, risk control matrices (RCMs), and engagement templates.
Ensured alignment with compliance frameworks including SOX, COSO, COBIT, and NIST.
Contributed to a positive work environment by collaborating effectively with colleagues across all levels of the organization.
Prepared audit programs and documentation in alignment with Generally Accepted Auditing Standards (GAAS).
Collaborated with cross-functional teams to design and execute comprehensive audit plans, ensuring alignment with company objectives.
Improved operational efficiency by identifying and addressing financial discrepancies through meticulous examination of financial records.
Maintained up-to-date knowledge of industry trends and emerging risks, ensuring relevance in audit approach and methodology.
Ensured adherence to international audit standards by keeping abreast of changes and implementing necessary updates in audit procedures.
Strengthened stakeholder relations by presenting audit findings in clear, constructive, and professional manner.
Improved compliance with regulatory standards through meticulous internal policy reviews and updates.
Education
B.Sc. - Computer Science
Annamalai University
Skills
SAP IT General Controls
SOX 404 Compliance & Testing
Access Controls & SOD in SAP
Change Management in SAP
COSO
COBIT
Role Management
IT Risk Assessment
User Access Reviews
Segregation of Duties
Privileged Access Management
Audit Workpapers
Control Walkthroughs
Remediation Tracking
Audit planning
Internal controls
Regulations and compliance
Policy compliance
Control recommendations
Teamwork and collaboration
Problem-solving
Analytical thinking
Audit management
Certification
SOX and ITGC Compliance Fundamentals
Coursework Skills
SAP IT General Controls
SOX 404 Compliance & Testing
Access Controls & SOD in SAP
Change Management in SAP
SOC1/SOC2 Reporting Basics
COSO, COBIT & NIST
SAP User Provisioning & PAM
SAP GRC & Role Management
IT Risk Assessment
Accomplishments
Achieved the audit completion targets on time with high quality audit documentation.
Improved the control environment by identifying and communicated the key issues with accuracy and efficiency.
Completed all audits, workpapers completion on time