Jitesh Shaw
Kolkata,West Bengal
Summary
ITGC Internal Auditor with 3+ years of experience in IT General Controls (ITGC) testing, SOX 404 compliance, and IT risk management. Skilled in testing 60-80 controls per audit cycle across Access Management, Change Management, and IT Operations, reviewing audit evidence, and preparing 10–20 evidence packages per quarter. Experienced in conducting 21+ monthly user access reviews, performing risk assessments, and managing centralized evidence repositories to improve control effectiveness and ensure regulatory compliance.
Overview
4
4
years of professional experience
Work History
ITGC Internal Auditor
Hitachi Digital Service
10.2022 - Current
- Provided assurance under Section 404 of Sarbanes-Oxley (SOX), ensuring all key IT controls operated effectively over specified periods.
- Evaluated end-to-end IT processes and system architectures to identify and mitigate risks.
- Assisted in internal and external audits, including control walkthroughs, evidence gathering, and audit testing.
- Conducted User Access Reviews (UAR) and validated access control processes to mitigate security risks.
- Assisted in risk assessments and control validation for IT systems, ensuring adherence to compliance frameworks.
- Performed internal system audits and comprehensive risk assessments to ensure SOX compliance across ITGC domains, including Access Management, Change Management, and IT Operations.
- Conducted IT SOX reviews, identified key risks, and tested Information Technology General Controls (ITGC) to verify compliance and control effectiveness.
- Participated in walkthrough sessions, reviewing SOPs, and extracting data from the Risk Control Matrix (RCM) to understand key processes and identify gaps.
- Selected samples based on defined sampling guidelines and gathered control evidence for submission to internal and external auditors.
- Reviewed control evidence for Completeness and Accuracy (C&A), ensuring alignment with compliance requirements and organizational standards.
- Categorized and tested ITGC controls related to security, change management, and operations, ensuring evidence collection and retention met frequency requirements (monthly, quarterly, recurring).
- Created and maintained centralized repositories for ITGC evidence, enabling streamlined evidence management and easy auditor access.
- Perform ITGC-based control testing for a Sarbanes-Oxley (SOX) audit, ensuring compliance with regulatory standards while maintaining process efficiency and accuracy.
- Reviewed and tested IAM roles, policies, MFA enforcement, and least privilege access controls.
- Assessed backup policies, disaster recovery plans, and multi-region deployments for business continuity.
- Conducted comprehensive audits to assess compliance with internal controls and regulatory requirements.
- Developed detailed audit reports outlining findings, recommendations, and corrective actions for management review.
- Collaborated with cross-functional teams to enhance risk assessment procedures and improve internal audit processes.
- Provided training sessions for junior auditors on best practices in auditing techniques and compliance standards.
- Assisted in the preparation of audit reports that clearly communicated findings and recommendations to key stakeholders.
- Identified and reported audit issues.
- Contributed to a positive work environment by collaborating effectively with colleagues across all levels of the organization.
- Produced audit reports.
- Investigated discrepancies discovered during auditing process.
- Supported management in developing action plans to address identified issues, promoting timely resolution of audit findings.
- Reviewed and identified risks, analyzed controls and tested compliance.
Education
Bachelor of Technology (B-Tech) -
Budge Budge Institute of Technology (BBIT)
Kolkata, India05-2022
Diploma - Computer Science And Technology
Budge Budge Institute of Technology
Kolkata, India 04.2001 -
Skills
ServiceNow GRC
Sox compliance
IT auditing
Test of effectiveness (TOE)
Risk assessment
Access management
Change management
IT general controls
User access reviews
Control walkthroughs
Jira
Excel
SQL
Control testing
Evidence management
Audit evidence collection
Completeness and accuracy testing
Accomplishments
- Received “Night-On-Time Award” recipient thrice for consistently delivering high-quality work under tight deadlines, ensuring timely compliance and audit report submissions.
- Documented ITAC testing results with evidence to support the operating effectiveness of control design and execution. - Collaborated with process owners to understand system configurations and identify key controls subject to SOX 404 testing. -
- Reviewed logical access restrictions, approval limits, and automated segregation of duties (SoD) rules across various modules.
- Validated input controls, configuration settings, and approval workflows to ensure completeness and accuracy of financial transactions.
Timeline
ITGC Internal Auditor
Hitachi Digital Service
10.2022 - Current
Diploma - Computer Science And Technology
Budge Budge Institute of Technology
04.2001 -
Bachelor of Technology (B-Tech) -
Budge Budge Institute of Technology (BBIT)