Summary
Overview
Work History
Education
Skills
Certification
Careerreview
Educationaloverview
Personal Information
Languages
Disclaimer
Timeline
Generic
Bharath Reddy Yarava

Bharath Reddy Yarava

IT Audits
Bengaluru,KA

Summary

Experience in performing both internal and external audits in Risk management and assessment of control design, testing, evaluation and reporting offering expertise in understanding audit and compliance procedures. Lead different engagements like SOC1, SOC2, SOX, ITAC, Governance and internal audits. Perform QA assessment testing for general IT controls; Access management, Change Management and SDLC auditing. Performed Business process controls, SOX audits, Third Party Security audits, Information Security Assessments, OS/DB/Network reviews with stakeholder as well as clients. Good understanding of the RCSA procedures, importance of working with BCM and Technology team in mitigating the risks.

Overview

8
8
years of professional experience
4
4
Certifications

Work History

Senior Control Mgmt. Specialist/Reviewer

Wells Fargo
3 2024 - Current
  • Implement and maintain on-going programs and processes to test the design and operational effectiveness of security controls
  • Evaluating the Activity, Action taken and Risks and document the rationales
  • Coordinate with different stakeholders in performing the design evaluation and performance evaluation and Change management quality assurance.
  • Organize the walkthroughs with control owner and understanding the entire control by reviewing the process documents, FRASA elements, responsible party
  • Prepare narratives for all the procedures and ensure it is documented in SharePoint.

Senior Associate

KPMG Global delivery centre
08.2022 - 02.2024
  • Conducted external audits under Tech Assurance as end to end Testing, Documenting and Reporting in accordance with the PCAOB (Public Company Accounting Oversight Board) Auditing Standards.
  • Conducted Process understanding discussions with the Clients as part of assessing risks arising from their use of Technology and identify control gaps within their processes.
  • Led team in evaluating and documenting the design and operating effectiveness of technology controls (GITCs, Business Process, SOX FSA and ITACs) pertaining to Client's Internal Controls over Financial Reporting.
  • Perform SOC 1 and SOC 2 (System and Organization Controls) assessments in accordance with the attestation standards established by the AICPA (American Institute of Certified Public Accountants)
  • Experience in general IT controls; Change Management, Incident Management and SDLC auditing / testing operating systems, databases, networks, security systems, cloud services.
  • Perform testing of IT Application Controls, IPE, and Interface Controls through code reviews, IT General Controls review covering areas such as Change Management, Access Management, and Batch Job scheduling/monitoring
  • Creating attributes and Procedures based on the control descriptions and Risk involved in it
  • Perform control walkthroughs to understand the approach of testing methodologies
  • Collaborating with other members of the engagement team to plan the engagement and develop relevant workpapers/deliverables
  • Experience in overseeing staff, reviewing their work and utilization, operating independently while collaborating with a global team
  • Maintain relationships with client management and the project Manager to manage expectations of service, including work products, timing, and deliverables
  • Monitoring and Tracking for Budget and Time Estimates on engagements.

Sr. Risk Analyst

PAYPAL INDIA PRIVATE LIMITED
02.2019 - 07.2022
  • Performed various risk assessments to identify, Validate and remediate the inherent risks involved in the process
  • Performed IT audits for ongoing monitoring of the stakeholders and partners to review compliance against regulatory requirements and PayPal policies
  • End to end control testing whether internal controls and operating effectiveness controls are designed and installed or aligned
  • Assess the current state of an organization's internal control/Sarbanes-Oxley Act framework and help clients drive
  • Knowledge in SOX compliance review, ISO27001-LA, COSO framework, COBIT, SOC1 and SOC2 testing reports
  • Liaise with client as well as external auditors for requirements and questions
  • Finalize Issues noted and discuss it with the required stakeholders to bring it to closure
  • Document Test work papers with Precision and detail
  • Conducting IT audits, SOX audits, Third Party Security audits, controls assessment in manual/automated environment, Information Security Assessments, OS/DB/Network reviews
  • Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Sr
  • Management and Clients
  • Involved in walkthroughs with process heads and stake holders on the pre-engagement of audit assessment and discuss about design effectiveness.

Business Control Analyst

LENOVO INDIA PRIVATE LIMITED
11.2017 - 07.2018
  • Performed various business process audits within budgeted timeframes and costs
  • Preparing the internal audit plan for the group and rollout the plan
  • Worked on SAP, Salesforce, Hyperion (Oracle Essbase and Smart view) for the preparation of reports
  • Monitoring the End user verification process by understanding sampling criteria's
  • Performing stock audits at various locations across country and preparation of audit report with appropriate audit evidence
  • Ensuring accurate and timely audit information is reported to Management and/or Risk Committees
  • Submission of audit reports to the business and providing necessary clarifications for the deviations identified during audits
  • Coordination with the Operations team, Sales, Business partners, agencies in obtaining and handling the POs matching with internal invoice copies for the deals using SAP.

Operational Financial Analyst / Audit Assistant

DUN & BRADSTREET INFORMATION SERVICES INDIA PRIVATE LIMITED
02.2016 - 08.2017

• Preparation of Audit checklist models, SOPs, Due Diligence, Compliance and Credit assessment reports as per client requirement by analysing the given entity and assignment of Credit Scores, Ratings and Credit limits

• Worked as a third party risk management services dealing with Compliance and assessment reports and timely fulfilment of reports, meeting tight deadlines during month/quarter end.

• Handling inventory management, financial, statutory, Ad hoc reports, MIS reporting, legal, compliance and KYC documentation.

• Preparing and presenting the performance and comparative analysis for the client audits taken up Quarterly and half yearly.

• Communicating the queries to the client and participating in the discussions thereupon

• Uploading the audit reports through the auditor logins

• Finalising the audit report by obtaining management comments and with the approval of seniors.

• Exploring risky areas, Fraud findings and Certifying revenue leakages to the client

• Leaded and trained 3 CA audit firms having 2 teams each of 3 persons

Education

MBA - Finance

ITM Business School
Bengaluru, India
04.2001 -

Skills

End-to-End Control testing - Internal and External audits

Certification

Certified Sarbanes Oxley Expert (CSOE) from SOXCPA

Careerreview

  • Wells Fargo, Senior Control Mgmt. Specialist/Reviewer, 03/2024 - Present, Implement and maintain on-going programs and processes to test the design and operational effectiveness of security controls., Evaluating the Activity, Action taken and Risks and document the rationales., Coordinate with different stakeholders in performing the design evaluation and performance evaluation and Change management quality assurance., Organize the walkthroughs with control owner and understanding the entire control by reviewing the process documents, FRASA elements, responsible party., Prepare narratives for all the procedures and ensure it is documented in SharePoint.
  • KPMG Global delivery centre, Senior Associate, 08/2022 - 02/2024, Conducted external audits under Tech Assurance as end to end Testing, Documenting and Reporting in accordance with the PCAOB (Public Company Accounting Oversight Board) Auditing Standards., Conducted Process understanding discussions with the Clients as part of assessing risks arising from their use of Technology and identify control gaps within their processes., Led team in evaluating and documenting the design and operating effectiveness of technology controls (GITCs, Business Process, SOX FSA and ITACs) pertaining to Client's Internal Controls over Financial Reporting., Perform SOC 1 and SOC 2 (System and Organization Controls) assessments in accordance with the attestation standards established by the AICPA (American Institute of Certified Public Accountants)., Experience in general IT controls; Change Management, Incident Management and SDLC auditing / testing operating systems, databases, networks, security systems, cloud services, Perform testing of IT Application Controls, IPE, and Interface Controls through code reviews, IT General Controls review covering areas such as Change Management, Access Management, and Batch Job scheduling/monitoring., Creating attributes and Procedures based on the control descriptions and Risk involved in it., Perform control walkthroughs to understand the approach of testing methodologies., Collaborating with other members of the engagement team to plan the engagement and develop relevant workpapers/deliverables., Experience in overseeing staff, reviewing their work and utilization, operating independently while collaborating with a global team., Maintain relationships with client management and the project Manager to manage expectations of service, including work products, timing, and deliverables., Monitoring and Tracking for Budget and Time Estimates on engagements.
  • PAYPAL INDIA PRIVATE LIMITED, Sr. Risk Analyst, 02/2019 - 07/2022, Performed various risk assessments to identify, Validate and remediate the inherent risks involved in the process, Performed IT audits for ongoing monitoring of the stakeholders and partners to review compliance against regulatory requirements and PayPal policies., End to end control testing whether internal controls and operating effectiveness controls are designed and installed or aligned., Assess the current state of an organization's internal control/Sarbanes-Oxley Act framework and help clients drive., Knowledge in SOX compliance review, COSO framework, COBIT, SOC1 and SOC2 testing reports., Liaise with client as well as external auditors for requirements and questions., Finalize Issues noted and discuss it with the required stakeholders to bring it to closure., Document Test work papers with Precision and detail., Conducting IT audits, SOX audits, Third Party Security audits, controls assessment in manual/automated environment, Information Security Assessments, OS/DB/Network reviews, Experience in identifying control gaps and communicating audit findings and control redesign recommendations to Sr. Management and Clients., Involved in walkthroughs with process heads and stake holders on the pre-engagement of audit assessment and discuss about design effectiveness
  • LENOVO INDIA PRIVATE LIMITED, Thakral One Solutions, Business Control Analyst, 11/2017 - 07/2018, Performed various business process audits within budgeted timeframes and costs, Preparing the internal audit plan for the group and rollout the plan, Worked on SAP, Salesforce, Hyperion (Oracle Essbase and Smart view) for the preparation of reports., Monitoring the End user verification process by understanding sampling criteria's, Performing stock audits at various locations across country and preparation of audit report with appropriate audit evidence, Ensuring accurate and timely audit information is reported to Management and/or Risk Committees., Submission of audit reports to the business and providing necessary clarifications for the deviations identified during audits., Coordination with the Operations team, Sales, Business partners, agencies in obtaining and handling the POs matching with internal invoice copies for the deals using SAP.
  • DUN & BRADSTREET INFORMATION SERVICES INDIA PRIVATE LIMITED, Intern, 04/2015 - 09/2015, Project Description:, Preparation of Audit checklist models, SOPs, Due Diligence, Compliance and Credit assessment reports as per client requirement by analysing the given entity and assignment of Credit Scores, Ratings and Credit limits, Worked as a third party risk management services dealing with Compliance and assessment reports and timely fulfilment of reports, meeting tight deadlines during month/quarter end., Handling inventory management, financial, statutory, Ad hoc reports, MIS reporting, legal, compliance and KYC documentation., Preparing and presenting the performance and comparative analysis for the client audits taken up Quarterly and half yearly., Communicating the queries to the client and participating in the discussions thereupon, Uploading the audit reports through the auditor logins, Finalising the audit report by obtaining management comments and with the approval of seniors., Exploring risky areas, Fraud findings and Certifying revenue leakages to the client, Leaded and trained 3 CA audit firms having 2 teams each of 3 persons
  • DUN & BRADSTREET INFORMATION SERVICES INDIA PRIVATE LIMITED, Teamlease, Operational Financial Analyst / Audit Assistant, 02/2016 - 08/2017, Project Description:, Preparation of Audit checklist models, SOPs, Due Diligence, Compliance and Credit assessment reports as per client requirement by analysing the given entity and assignment of Credit Scores, Ratings and Credit limits, Worked as a third party risk management services dealing with Compliance and assessment reports and timely fulfilment of reports, meeting tight deadlines during month/quarter end., Handling inventory management, financial, statutory, Ad hoc reports, MIS reporting, legal, compliance and KYC documentation., Preparing and presenting the performance and comparative analysis for the client audits taken up Quarterly and half yearly., Communicating the queries to the client and participating in the discussions thereupon, Uploading the audit reports through the auditor logins, Finalising the audit report by obtaining management comments and with the approval of seniors., Exploring risky areas, Fraud findings and Certifying revenue leakages to the client, Leaded and trained 3 CA audit firms having 2 teams each of 3 persons

Educationaloverview

  • High School, Mahesh Concept School, SSC, 2008, 76%
  • Intermediate, Master Minds, MEC, 2010, 88%
  • Banking & Accounts, ASN Degree College, B.Com, 2013, 61%
  • Finance, ITM Business School, Bengaluru, PGDM, 2016, 3.3 CGPA

Personal Information

  • Total Experience: 7 years 6 months
  • Date of Birth: 08/01/93
  • Gender: Male
  • Nationality: Indian

Languages

Telugu
Bilingual or Proficient (C2)
English
Advanced (C1)
Hindi
Upper intermediate (B2)
Kannada
Intermediate (B1)

Disclaimer

I hereby declare that the information furnished above is true to the best of my knowledge and belief.

Timeline

Senior Associate

KPMG Global delivery centre
08.2022 - 02.2024

Sr. Risk Analyst

PAYPAL INDIA PRIVATE LIMITED
02.2019 - 07.2022

Business Control Analyst

LENOVO INDIA PRIVATE LIMITED
11.2017 - 07.2018

Operational Financial Analyst / Audit Assistant

DUN & BRADSTREET INFORMATION SERVICES INDIA PRIVATE LIMITED
02.2016 - 08.2017

MBA - Finance

ITM Business School
04.2001 -

Senior Control Mgmt. Specialist/Reviewer

Wells Fargo
3 2024 - Current
Bharath Reddy YaravaIT Audits