Raja Sekhar Reddy

Detail-oriented Internal Auditor with over three years of experience in assessing IT controls and ensuring compliance with regulatory standards. Expertise in conducting comprehensive risk assessments, internal control testing, and SOX compliance audits. Dedicated to enhancing data security and operational efficiency through strategic collaboration and analytical problem-solving. Proven track record of identifying process improvements and implementing solutions that drive organizational success.

• Evaluated compliance with SOX section 404, testing adequacy of internal controls in key areas.
• Involved in the fieldwork phase of the audit life cycle, performing Test of Design (TOD) and Test of Effectiveness (TOE) for ITGC Controls.
• Maintained a strong client focus, being responsive to clients' requests, and developed/maintained productive working relationships with client personnel.
• Consistently met with control owners across the organization to gather critical information necessary to conduct the audit.
• Perform IT-related controls testing and evaluation for Information Systems.
• Prepare test procedures based on control requirements and document test results based on the testing performed.
• Need to present the report of control deficiencies identified to management and business clients.
• Deployment of company methodologies (related to risk assessment and prioritization, risk responses, and risk management capability assessments), supporting tools, and other materials.
• Review of internal controls over operations for various businesses across the Infrastructure, manufacturing, and service sectors. SOX Testing – Design and Operating Effectiveness, SOX - ITGC
• Extensive experience in: IT General Controls across platforms for the following areas: 1. Change Management . 2.User Access Management (Access management/Access review/Termination control) .
• Executes audit fieldwork autonomously in accordance with audit work programs and makes improvement recommendations .
• Execute audit procedures to evaluate the accuracy and completeness of System Reports.