Rakesh Lahoti
Chartered Accountant
Bangalore
Summary
An Ambitious and dynamic Techno- finance professional with over 15+ years of experience in SOX engagements, ITGC, Internal controls, Risk Assessment, Internal audit, Deployment of Risk and control framework, SAP Security & GRC implementation, SOD Management, GRC rule set review and people management. Customer service oriented with the ability to manage relationship and ensure alignment with business strategies
Overview
17
17
years of professional experience
3
3
years of post-secondary education
Work History
Heading the Sox PMO Office for IT Controls
Qualcomm India Private Limited
Bangalore
03.2022 - Current
- Responsible for overall Sox IT program, India statutory Audit for IT controls, Germany Stat Audit
- Looking after IT operational Internal audits for entire IT organization including integrated audits
- Responsible to ensure all other regulatory/certification audits are being conducted successfully for IT organizations
- Managing management testing audit team (overall, 10 person)
IT Sox and Control Governance (Senior Manager)
Philips
06.2019 - 02.2022
- Responsible to perform SOX scoping activities along with Internal controls team, Business process owners, ITLT and external auditors
- Responsible to Design & administer Sox controls for new Applications & business process
- Alignment with Business, IT to identify controls owners
- Member of Sox board to ensure Risk and controls matrix is updated, Sox methodologies is updated
- Responsible to perform risk assessment and design Sox controls (Business & ITGC), Operational & regulatory controls
- Perform walkthrough with control owners and external auditor
- Responsible to ensure testing of ITGC controls along with review and follow up for remediation
- Working with External (E&Y) & Management auditor (KPMG) to ensure successful closure of Sox findings
- Responsible to provide training to project team, operation team & team members on Sox controls to strengthen overall Sox program
- Member of Authorization board and responsible to perform GRC Rule set review & SOD review
- Responsible to perform entity level controls being part of Sox Board
- Responsible to implement & monitor IT automated & IT dependent controls
- Reporting of Group Sox IT result to Audit Risk committee – CIO & CFO.
Manager (FLOD partner for Finance team)
PayPal
05.2017 - 06.2019
- Responsible to perform SOX scoping activities along with Internal controls team, Business process owners & IT head
- Responsible to perform risk assessment and design Sox controls (Business & ITGC), Operational & regulatory controls
- Developing compliance program for finance organization and ensuring team is complied with controls, policy adoption and privacy & InfoSec requirements
- Driving remediation across Finance function to ensure issues are remediated on time
- CFO & VPs (Finance) are updated on monthly basis with remediation progress
- Conducting vendor due diligence involving reviewing SSAE16\SCO 1 reports, vendor resilience capabilities, Privacy impact assessment etc.
Manager
Capgemini
08.2013 - 05.2017
- Partner with process owners to update and maintain process documentation / flowcharts and controls and where necessary perform walkthroughs to validate the existing SOX documentation and ensure that any changes are implemented
- Identify potential SOX implications of changes in the control environment as a result of, but not limited to, accounting regulations, internal company policies, system enhancements or implementations, company reorganizations
- Perform management and when applicable, remediation testing of internal controls to ensure timely completion and compliance with the annual SOX test plan
- Work with internal and external auditors to assist with the coordinate audit timing, results of management and remediation testing and SOX reporting
- Responsible for maintaining and updating all aspects of the internal SOX reporting system
- Build periodic reporting and status updates which helped client to strength controls around Access Controls process
- Implementing controls around vulnerabilities arising out of excess exposure (access control) to users across the company & Responsible for managing segregation of duties
- Play a significant part in the recruitment /development of new people
- Leading and motivating multi-functional teams in dispersed and complex environments
- Settled large, complex problems and in doing so, build positive relationships with the client.
Assistant Manager (Finance Global Business Process)
Dr Reddy Labs
11.2012 - 08.2013
- Perform management and when applicable, remediation testing of internal controls to ensure timely completion and compliance with the annual SOX test plan
- SOD (segregation of duty) management for entire DRL employees
- (Approx 15000+ users)
- Oversight and review of all access control related process and workflows
- Building SOD rule set in GRC and defining risk
- Review of risk control matrix, automation of manuals controls
- Access management for critical transaction, posting limit authorization
- Interface between IT team and respective BU finance team as a functional consultant for all implementation, improvements etc.
Senior Associate Consultant
Infosys Limited Ltd
04.2010 - 11.2012
- Initiating and implementing various Compliance monitoring activities
- Handling Authorizations in SAP R/3 & GRC systems
- Periodic review and analysis of risks in the system and update the Mitigation controls
- Role design across various modules, SOD management & Critical profile monitoring & review
- Reviewing of Firefighter user ids regularly to optimize the utilization of FF Ids.
Audit Assistant
M/s P.A & Associates
04.2007 - 03.2010
- Gained exposure in different areas like Statutory Audit, Internal Audit, Tax Audit and Finance.
Education
B.com - Finance & Accounts
University of Bikaner
Bikaner 04.2002 - 05.2005
Chartered Accountancy - undefined
ICAI
Skills
Risk assessments
Internal audit
ITGC audit
Project management
People Management
CAPA issue management
SAP GRC access control & Security implementation & SOD management
Experience in supporting global operations environment
Teamwork
Adaptability
Problem Solving
Time Management
Interpersonal skills
Work Ethic
Positive Attitude
Responsibility
Accomplishments
- Recipient of Client Choice award from Unilever business services finance team BFS.
- Won best Value Creation Project Award for Access control hub implementation for Unilever.
- Won People Choice award from Capgemini for H1 2016
Personal Information
Date of Birth: 12/07/86
Timeline
Heading the Sox PMO Office for IT Controls
Qualcomm India Private Limited
03.2022 - Current
IT Sox and Control Governance (Senior Manager)
Philips
06.2019 - 02.2022
Manager (FLOD partner for Finance team)
PayPal
05.2017 - 06.2019
Manager
Capgemini
08.2013 - 05.2017
Assistant Manager (Finance Global Business Process)
Dr Reddy Labs
11.2012 - 08.2013
Senior Associate Consultant
Infosys Limited Ltd
04.2010 - 11.2012
Audit Assistant
M/s P.A & Associates
04.2007 - 03.2010
B.com - Finance & Accounts
University of Bikaner
04.2002 - 05.2005
Chartered Accountancy - undefined
ICAI