Shibani Kapoor

Senior Consultant

Ernst & Young LLP

Gurugram

10.2023 - Current

Managed high-impact FAIT and internal audit engagements across UAE, Egypt, US, UK, Canada, South Africa, Singapore, and India, leading teams of 5–8 members and delivering comprehensive IT risk assurance
Managed complete delivery lifecycle for Internal and External audits, covering internal audits, statutory audits, and remediation planning—serving as a single point of contact for client stakeholders and senior leadership
Managed SOX 404 compliance programs for Fortune 500 clients, aligning with auditors, SOX compliance leads, and CTOs to execute ITGC, ITAC, IPE, and remediation testing
Executed IT General Control reviews (ITGC) and configuration testing for SAP, Oracle and legacy in-house systems as part of financial audit support across healthcare, agrochemicals, manufacturing and banking and insurance
Assessed and validated application and IT-dependent controls (ITAC) across finance, procurement, payroll, and other modules—enhancing automation and reducing reliance on manual testing
Performed SOD and user access reviews (UAR), and supported RACM design and risk mapping across critical systems and processes
Managed internal audits covering IT operations, data center governance, IT asset lifecycle, disaster recovery, cloud environments, and third-party/vendor risk
Oversaw access control testing and remediation, including privileged access reviews and policy compliance checks via tools like SAP GRC, ServiceNow, CyberArk, and Archer
Validated backup procedures, disaster recovery controls, and job scheduling logs (e.g., SAP SM36/SM37), ensuring alignment with business continuity protocols
Led cross-industry audit trail compliance initiatives across India, providing strategic oversight and expert guidance to client teams on remediation efforts, while ensuring full adherence to evolving regulatory frameworks and industry standards
Planned and delivered client-centric PMO activities, including resource planning, budgeting, documentation tracking, and audit issue management
Presented dashboards and risk intelligence to leadership teams, facilitating CTO-level insights and actionable remediation strategies
Contributed to successful proposal development and RFP responses, helping secure new clients and drive account growth across key sectors
Received recognition a Business Extraordinaire Award (Q1 2024) for high-quality work that adds value for all stakeholders
Promoted normatively from Associate Consultant to Senior Consultant 2 within 4+ years for consistent performance, technical depth, and early leadership demonstration