Summary
Overview
Work History
Education
Skills
Certification
Awards
Websites
Timeline
Generic
GIRISH K

GIRISH K

Bengaluru

Summary

Results-driven professional with over 15 years of experience in SOX compliance and audit functions. Demonstrated expertise in risk management, business continuity, and disaster recovery strategies. Consistently upholds high standards of integrity and trust with stakeholders.

Overview

17
17
years of professional experience
1
1
Certification

Work History

HCL Technologies
Bangalore
08.2022 - Current
  • Responsible for strategizing, implementing, and evaluating the effectiveness of key internal controls.
  • Coordinating and facilitating internal and external audits to address audit issues, responses, action plans, and remediation.
  • Proficient in preparing and assessing Design Effectiveness (DE) and Operating Effectiveness (OE) testing, per the outlined control testing approach.
  • Identify and document control deficiencies for critical applications, recommend actions to resolve the root causes of issues, and update on the status of management remedial actions.
  • Assess risk, implement mitigation strategies, and manage diverse account and company scenarios using techniques such as acceptance, transfer, avoidance, monitoring, and root-level control of risk.
  • Design and implement BCP/DR processes: Lead the development and implementation of comprehensive BCP and DR processes, with industry best practices and regulatory requirements.
  • Documentation and Policy Development: Create, maintain, and review the detailed documentation of the BCP and DR plan, procedures, and policies.
  • Testing and Evaluation: Plan, coordinate, and execute regular tests and drills of BCP and DR plans to assess their effectiveness and identify areas for improvement.
  • Training and Awareness: Provide training and awareness sessions to ensure all employees are knowledgeable about their roles and responsibilities in the event of a disruption.
  • Incident Response Coordination: Serve as a single point of contact on incidents to ensure timely resolution and minimal disruption to business operations.

Lead Consultant

Wipro Technology Ltd
Bengaluru
05.2021 - 08.2022
  • Well-versed in testing all set of Security, Operational and Change Management controls.
  • Setting-up a meeting with Business and Management about control plan, design and allocations of testing controls for the assessment year.
  • Conducting governance call with all the stakeholders on process discussions, issues and mitigations.
  • Liaise with business and stakeholders' decision on a project discussion.
  • Monitoring and responsible of the CAATs tool to follow up the controls queries and to share the status updates to the business on a daily meeting.
  • Reviews the work papers of the team members ensuring that compliance met as per the standards.
  • Evaluating existing policies, procedures and identifying the new controls.

GRC-Senior Associate

Cognizant Technology Ltd
Bengaluru
08.2020 - 05.2021
  • Identify gaps in control design and operative effectiveness of IT general control to assist IT management with related remediation measures.
  • Write audit work papers and reports with minimal intervention by the Audit manager for new application.
  • Documenting ToD and ToE based on the evidence provided for defined test plan on process and technical controls.
  • Document the test results and upload completed work papers and submit work papers to the Company for L2 reviews.
  • Perform root cause analysis, document audit observations and design efficient and effective remediation plans.
  • Performing an IT internal control weaknesses in processes by performing Risk Assessment and document the findings.

Senior IT Auditor

HP-TEKsystems
Bengaluru
12.2018 - 08.2020
  • Communicates audit progress and results to both department and business unit management, both verbally and in writing.
  • Assist management by performing risk assessments and evaluating critical IT processes for both existing and new applications.
  • Providing leadership and direction to identify, recruit, develop and grow resources for the team and associated functions.
  • Derived cost reduction and efficiency of compliance activities.

IT Auditor

Honeywell Technology Ltd
Bengaluru
02.2016 - 09.2018
  • Expertise in all set of controls i.e. Security, Operational and Change Management.
  • A self-starter and takes responsibility of the work and aware of the timelines to deliver the work within the timelines.
  • Able to quickly understand the risks and determining the adequacy of the controls to mitigate the risk.
  • Follow up on issues and remedial actions in a timely manner.
  • Aware of Walkthrough requirements.
  • Changing the 404 document steps and process based on requirement of the control changes on timely manner.
  • Exposure in managing IT General Controls (ITGC) reviews a part of statutory audit.

IT Audit Analyst

Accenture Technology Pvt Ltd
Bengaluru
10.2008 - 02.2016
  • Good Experience in testing of SOX IT General Controls.
  • Ability to work well under pressure with tight deadlines while delivering high quality and output.
  • Ability to work independently and as part of a team.
  • Responsible for audit queries and clarifying them in a significant manner.
  • Responsible for interacting with business users for requirement gathering, analyzing issues and providing timely updates on progress made.
  • Experience working in a globally distributed team.

Education

MBA -

Bengaluru University
Bengaluru

Skills

  • IT audit reporting processes
  • Operational risk management
  • It controls testing
  • Disaster recovery planning
  • Team leadership
  • Proficient in MS Office, Snow, and JIRA tools expertise
  • Training and development

Certification

  • CISM-ISACA
  • CISA-ISACA
  • ISO 27001 Lead Auditors
  • Certified in GRC Professionals

Awards

  • Successfully handled 3 International On-site transitions on GRC, BCP-DR projects
  • Received the best team award for the project specific award
  • Received an Excellence Award by business on IT audit compliance for zero exceptional work
  • Received thrice Summit and Numero-Uno Awards during tenure for the best quality audit with 100% compliance and for the best team award
  • Good understanding of various applications life cycles and ticketing tools

Timeline

HCL Technologies
08.2022 - Current

Lead Consultant

Wipro Technology Ltd
05.2021 - 08.2022

GRC-Senior Associate

Cognizant Technology Ltd
08.2020 - 05.2021

Senior IT Auditor

HP-TEKsystems
12.2018 - 08.2020

IT Auditor

Honeywell Technology Ltd
02.2016 - 09.2018

IT Audit Analyst

Accenture Technology Pvt Ltd
10.2008 - 02.2016

MBA -

Bengaluru University
GIRISH K