Summary
Work History
Education
Skills
Awards
Industries worked for
Additional Information
Timeline
Generic
Navneet Ray

Navneet Ray

Consultant

Summary

Accomplished auditing professional with 3.6 years of experience and well-established knowledge of control process validation. Trained in internal as well as external audits with specialization of IT General Controls (ITGCs) & IT Automated Controls (ITACs), Backup processes for clients in diverse industries.

Work History

IRM

Automobile Industry
  • Worked for 2 years on an IT SOX engagement for an Automobile industry performing GITC, ITAC & IPE testing.
  • Performed testing of IT Automated controls for Warranty and Payroll services, IPE testing of completeness and accuracy for the extracted reports along with the detail testing for the Required data pointers provided by Audit team also performed testing of General IT controls (GITC) for SAP HR application and few cloud based non-SAP applications.
  • Was also responsible for testing and preparation of workpapers along with completing the relevant screens of General IT controls for SAP HR and other Non-SAP applications (Access Management, Change Management & batch job management).

ISO 27001 Readiness Assessment

Internal Audit
  • Worked on an internal audit engagement for an energy company, conducted process walkthroughs of the in-scope applications to understand and assess the control environment as required by the ISO 27001 standard.
  • Tested their In-scope applications and assessed the risks and process gaps related to their IT controls to provide the client with the summary of deficiencies and recommendations to mitigate those risks and process gaps.

SOC & HIPAA Engagement

Assurance Services
  • Worked on SOC1 Type II, SOC2 Type II & HIPAA report for an IT solution company for the period FY22 & FY23
  • Proficiently tested all the applications, Incident management process, change management process, Backup process and all the IT infrastructure related to the organization & responsibly documented all the deficiencies noted while testing and prepared a briefed SOC 1, SOC 2 & HIPAA report for the organization.

SOX

Investment Bank
  • In FY25 worked on an Investment bank project performing banking controls testing.
  • Performed detailed testing of ITGCs related to banking systems, including access controls, change management, data integrity and IT operations ensuring compliance with SOX regulations.
  • Identified deficiencies in IT controls, collaborated with stakeholders to develop remediation plans and verified the implementation of corrective actions.

Education

Bachelors of Technology - ECE

Chandigarh Group of Colleges
Landran, Punjab
06-2022

Skills

Good Communication and Reporting skills

Proficiency with SOX, ISO 27001, HIPAA and other compliance frameworks

Ability to evaluate security frameworks, identify vulnerabilities, and perform risk based audits

Hands-on experience in testing access controls, change management, and automated controls

Awards

Rewards like Accolades and Super Team

Industries worked for

  • Automobile Industry
  • Investment Bank
  • Information Technology Solutions
  • Insurance sector companies
  • Renewable energy Sector

Additional Information

KPMG India - January 2022 - Current

Timeline

IRM

Automobile Industry

ISO 27001 Readiness Assessment

Internal Audit

SOC & HIPAA Engagement

Assurance Services

SOX

Investment Bank

Bachelors of Technology - ECE

Chandigarh Group of Colleges
Navneet RayConsultant