SAKET KUMAR SINHA

IT Audit

Managing Senior Leadership Steerco

Automation Project

SAP Security Monitoring

• Driving the 1st Line of Defense technology risk practice in India - third party risk due diligence program, controls validation program, and risk & controls compliance program
• Collaborating with multiple business groups including technology, procurement, privacy, audit, outsourcing risk management and business units for risk & controls and risk management activities
• Reporting control issues and follow up on non-compliances with functional leadership to mitigate and close the issues
• Engaging with business units for risk management activities including risk treatment options
• Leading the onsite assessment for managed service providers
• Reviewing the risk assessment questionnaires and evidentiary proof submitted in order to identify the overall control effectiveness and residual risk associated
• Managing a findings management process to track findings and ensuring control issues are documented, tracked, and remedial activities are taking place
• Had led the India wide security awareness program
• Member of committees to report factual updates pertaining to various risk assessment, outcomes and management procedures.

• Worked as an Assistant Manager with the risk consulting team
• Handled a portfolio of approx
• 6000 hours with a team of 6-8 professionals dedicated for IT General Computer Controls testing
• Performed SOX 404, SSAE16 (Type 2) and Internal Audits involving investigation and checking processes and procedures for client
• Led process walk-through calls (along with executive/seniors) with business heads, control owners etc
• To gather information required for SOX 404 and SSAE16 testing
• Further, documented the process Narratives, performed Test of Design (ToD), Test of Effectiveness (ToE) and documented the work papers with test results
• Acted as a Quality Assurance lead on the controls testing work papers prepared by executive and seniors
• Was part of the recruitment team involved in campus and lateral hiring
• Also, conducted technical trainings on operating systems (Windows, UNIX), databases (Oracle, MS SQL) and application testing
• Involved in project management activities that includes regular status update calls with the US teams, internal catch-ups with manager/sr
• Manager, budgeting, etc
• Took care of other management tasks such as resource management including scheduling, monitoring and resource utilization.

• Provided advisory assistance for SOX Compliance framework for General IT Controls (GITC) processes, including design assessment and testing of GITC, identification of control gaps and suggestion of remedial procedures
• SOX 404 & SSAE 16 Independent /Rely and Re-Performance Testing / Audit for IT applications, Operating systems and Databases
• Performed walk-throughs with functional heads, process owners and application owners to gather relevant information required for testing
• Assessments and testing of IT controls around various areas such as Physical Security, Access Security and Change Management
• Worked on GITC assessment to provide reasonable assurance on the design, implementation and operating effectiveness of General Information Technology Controls (GITC)
• Tested controls for following areas, operating system and database: Data Center and Network Operations, Access Security, System Change Control, Backups, Operating System -Windows & Unix, Database - MS SQL Server & Oracle

• Researched & evaluated new business opportunities, business prospects, partners and customers, established contacts with them to understand their business needs execution for pursuing projects in International Markets (like US, Canada, Australia & New Zealand)
• Monitored market developments, stayed updated on latest market trends and differentiators between the company and their competitors and incorporate it in preparing the sales/business strategy
• Was involved in client relationship management, liaised between client servicing head and the client for smooth execution of the projects
• Identified and developed new streams of revenue growth and maintained relationships with customers to achieve repeat / referral business.