Vinit Kumar
Gurgaon
Summary
With over 7+ years of dedicated experience in Information Systems Audit and IT General Control reviews, I bring a wealth of experience in Risk Management, SOX Testing, IFC audits (IT Controls), and IT Application Controls review, SDLC reviews, fueled by proficiency in SAP and SAP audits. I am CISA certified (July 2024) and my background includes comprehensive Internal Audit across diverse industries and organizations. Known for adept multitasking and problem-solving abilities, I thrive in fast-paced environments, mastering new concepts and technologies efficiently while constantly delivering the quality work.
Overview
8
8
years of professional experience
1
1
Certification
Work History
Senior Controls Analyst
Moody's Shared Services India Pvt. Ltd.
Gurgaon
10.2022 - Current
- Lead SOX program planning and execution for Tech Assurance, including ITGCs, ITACs, Interfaces, and Key Reports.
- Coordinate with various teams and application owners to scope and evaluate systems and controls, ensuring comprehensive SOX coverage.
- Conduct and facilitate process walkthroughs with diverse stakeholders, ensuring clear communication and team alignment.
- Serve as the primary liaison between external auditors and internal stakeholders, managing walkthroughs and evidence requirements.
- Review and prepare test workpapers, identify and document control deficiencies, and provide impact analysis with recommendations for mitigation.
- Assist Control Owners in performing review control testing and delivering SOX compliance training.
- Design controls for newly implemented applications, upgrades of existing applications, and entity integrations.
- Perform SDLC reviews to ensure compliance with SOX requirements and mitigate risks associated with system changes.
- Manage timelines and deliverables, ensuring alignment with project goals and adherence to quality standards.
- Provide ongoing support and guidance to stakeholders on SOX compliance, fostering a culture of continuous improvement.
Consultant
KPMG Assurance and Consulting Services LLP
Gurgaon
09.2021 - 10.2022
- Led an IT General Controls SOX testing engagement for a leading capital goods company
- Prepared risk control matrix for the organization in line with the SOX compliance and performed the control testing through detailed inquiries and discussion with process owners and senior IT management from a functional as well as technical aspect
- Identified various process and system design gaps relating to IT security, access management, change management, computer operations, incident management, backup and VAPT assessment
- Led an IFC testing engagement for IT controls (SAP application) for a leading power company in India
- Tested the risk control matrix of the organization at design and operational levels
- Identified various process and system design gaps and developed meaningful recommendations
- Document audit results and communicate issues to management, identifying opportunities for improvement in the design and effectiveness of key controls related to Change Management
- Monitor key risk indicators, significant change activities and escalation of emerging issues to senior management well within the established timelines
- Conducted walkthroughs with various key client personnel to understand IT environment and identified key control areas to be assessed keeping in mind the potential risks
- Performed IT General Control (ITGC) testing including preparation of Risk and Control Matrices, design, benchmarking, testing of controls, documentation of results, identifying control deficiencies and provided recommendations for mitigation.
Systems Engineer
Tata Consultancy Services
Hyderabad
10.2016 - 09.2021
- Involved in SOX testing for a global confectionary company based out of USA
- This included testing of IT general controls for client applications, business process reviews including identification of risk and controls, testing of design and operating effectiveness of the controls implemented, preparation of audit reports and communication with external auditors
- Involved in process and control setup along with SOP creation
- Performed testing of SOD controls related to change management on application and process level for Telecom services client based out of Australia
- Performed IT General Controls review for different financial applications
- It included both SOX and Non-SOX standards like Change Management, Access management, Incident Management, Problem Management, Backup and Restoration Management.
Education
Bachelor of Engineering - Information Technology
IEM, Kolkata (W.B.)
01.2016
Skills
- Information Systems Audit
- Risk Assessment
- SOX Compliance
- SSAE16 & SOX 404 audits
- Internal Controls
- IFC Audit (IT Controls)
- IT General Controls (ITGC)
- IT Application Controls (ITACs)
- Internal Audit
- Team and project management
Accomplishments
- Moody's - Awarded with 'Employee of the Quarter' award for excellent performance throughout the quarter
- KPMG - Awarded with 'Kudos' award for excellent performance throughout
- KPMG - Won the Rising star award and received client appreciation for extraordinary performance in November 2021 (GTA Busy season)
Certification
- Certified Information Systems Auditor (CISA) issued by ISACA
Languages
Hindi
First Language
English
Upper Intermediate (B2)
B2
Technical Skills
• ERP: SAP, Oracle, RevPro & PeopleSoft
• Database: Oracle, MSSQL, Sybase & DB2
• Operating System: Windows, Unix
• Ticketing Tool: ServiceNow, JIRA
• Data Visualization Tools: PowerBI, Alteryx
Timeline
Senior Controls Analyst
Moody's Shared Services India Pvt. Ltd.
10.2022 - Current
Consultant
KPMG Assurance and Consulting Services LLP
09.2021 - 10.2022
Systems Engineer
Tata Consultancy Services
10.2016 - 09.2021
Bachelor of Engineering - Information Technology
IEM, Kolkata (W.B.)
- Certified Information Systems Auditor (CISA) issued by ISACA
Similar Profiles
Bangi PrudhvirajBangi Prudhviraj
Lead Specialist (A2R – ICMR) at DSM-FIRMENICH SHARED SERVICES INDIA PVT LTDLead Specialist (A2R – ICMR) at DSM-FIRMENICH SHARED SERVICES INDIA PVT LTD
Nagesh ShingadeNagesh Shingade
Project Manager at Davies Shared Services India Pvt LtdProject Manager at Davies Shared Services India Pvt Ltd
Neelanjana DayanandanNeelanjana Dayanandan
Senior Associate at Grant Thornton US Shared Services Center, India Pvt. LtdSenior Associate at Grant Thornton US Shared Services Center, India Pvt. Ltd