A result oriented IT Governance Professional with over 18 years of experience in the IT industry. Currently working in HCLTECH as a CONSULTANT. Expertise in SOX 404, Access Management, Change Management, Risk Assessment, Risk Advisory, IdM Reconciliations, process improvement and mentoring. Extensive background in all stages of audits, including planning; study, evaluation, and testing of controls; reporting; and follow-up. Proven track record of establishing and restructuring systems/ procedures, thereby contributing in a major way towards augmented growth and IT security postures of clients. Possess excellent interpersonal, communication and organizational skills with demonstrated abilities in team management.
Review control documents and ensure that the control design meets the regulatory and audit requirements.
Work with the stakeholders to remediate any flaws in the design documents.,
Provide suggestions and initiatives to the stakeholders as and when necessary.
Review the testing documents from the delivery team and document the results in a template for audit submission.
Governance Lead,
As a change Coordinator, will ensure all changes that goes into production are reviewed and Validated.
Assist Internal and External Auditors with respect to Required Reports and Documentation.
Conduct and review ITGC testing for SOX applications.
Facilitate Vendor (external) audit (SSAE-16) review, customer audits, and actively manage the remediation of external audit.
Perform Bi Annual review user access review of SOX applications.
Helped in preparing SOPs and Knowledge based articles related to the project.
As a Governance Lead ensured that, there were no Audit findings in the External Audit for the financial year 2021 and was appreciated for the same.
Risk Advisory, Deputy Manager
Perform IPE testing and identify the risks and suggest remediation.
Preparing Deficiency Closure Document (DCD) for any failures identified during audit and help implement an alternate approach to compensate the control failure.
Conduct and review ITGC testing for SOX applications., Facilitate Vendor (external) audit (SSAE-16) review, customer audits, and actively manage the remediation of external audit.
Evaluate the internal control measures and procedures for SOX requirements and standards and report the non-complying areas.
Preparation and submission of SOC reports to the clients.
GE Treasury SOX and GRC Admin
Overall accountability of project planning, stakeholder coordination & delivery.
Responsible to ensure that all SoX and Mission Critical applications are in line with the Corporate policy.
Trigger asset certifications to identify the risk in scope.
Perform Risk Assessments for the identified in scope applications.
Ensure audit tasks are completed accurately and within established timeframes.
Liaise between in-house managers/IT department and external auditors.
Prepare audit scopes, report findings, and present recommendations to IT controller.
Ensure that all administrative duties like Reporting, Dashboard Management, Task Scheduling and management are managed effectively.
Identify any deficiencies in TOD and TOE phases, remediate/mitigate the deficiencies and retest if required.
Perform Access reviews for all SOX and Non SOX applications across Application, DB, OS and Domain.
Ensure all compliance documents are centrally stored in the digital library to assist the IT controller for external audits.
Evaluate the internal control measures and procedures for SOX requirements and standards and report the non-complying areas.
Perform Interface Control Testing (ICAT).
Assist in application and IT Risk scoping at the beginning of the year.
Ensure all pertinent documentation is of 'audit quality' and meets the required audit objectives.
Facilitate Vendor (external) audit (SSAE-16) review, customer audits, and actively manage the remediation of external audit.
IT Governance and Strategic Advisory
Responsible to ensure that all SoX and Mission Critical applications are in line with the Corporate policy and controls.
Overall accountability of project planning, stakeholder coordination & delivery.
Ensure audit tasks are completed accurately and within established timeframes.
Liaise between in-house managers/IT department and external auditors.
Perform quarterly system access reviews (QAR) for all Sox applications and follow up until defect remediation and document the test plan.
Perform Interface Control Testing (ICAT) for in scope Sox applications.
Prepare audit scopes, report findings, and present recommendations to IT controller.
Ensure that all administrative duties like Reporting, Dashboard Management, Task Scheduling and management are managed effectively.
Identify any deficiencies in TOD and TOE phases, remediate/mitigate the deficiencies and retest if required.
Evaluate the internal control measures and procedures for SOX requirements and standards and report the non-complying areas.
Ensure all pertinent documentation is of 'audit quality' and meets the required audit objectives.
Commercial Finance, Senior Software Engineer
Established processes to facilitate better execution of project.
Encouraged and facilitated the knowledge building within the team.
Worked closely with the client/OSC to discuss various ideas/solutions, issues and timelines.
Encouraged the identification and implementation of innovative ideas to yield cost/effort savings.
Participated in requirement gathering through various meetings and interactions with the client as required.
Assisted the team in various phases as required to complete the task with good quality.