About Candidate

Overall, I have 5.2+ years of experience in IT Industry and 4+ as an Internal Auditor.
 Experience in leading teams to execute IT/audit/Risk Management within stipulated timeline
along with high quality deliverables.
 IT general controls concepts in the areas of change management, computer operations and access to
programs.
 Conduct test of design and test of control operation over ITGC / company level controls and effectively
document the results ensuring that conclusions, findings and recommendations are adequately supported.
 I have worked on controls like User Provisioning, User deprovisioning, Password Parameters, High
Privileged Access (HPA) and User Access Review (UAR), Job Monitoring, Backup and Recovery
 Build and maintain client relationships by understanding and being responsive to
 client needs and ensuring high quality of deliverables.
 Participated on IT compliance projects and ensures team members are provided with timely and accurate
project information and status updates.
 Interfaces with the business and IT teams where required to apply IT controls and improvements to the
existing IT controls.
 I am also part of walkthrough calls and perform interim and roll forward testing for the projects
 I have knowledge on Risk Assessment and SOC Report as well
 Coordinating and responding to Internal and External audit requests.
 Testing operating effectiveness, as part of IT Audits, by taking samples from Production
Systems to ensure continued compliance with section 404 of the Sarbanes-Oxley Act of 2002

  • Communicating the observations or gaps identified during the controls Review/IT
    Audit to the senior auditors and managers.
     Preparing Remediation plan and management responses for observations identified and share the
    Risk Control Matrix with team leaders.
     In Incident Management mainly inspect whether the tickets were solved as per the SLA’S (Service
    Level Agreement) or not
     If I identify any deficiencies, I will mark it as observation and exception and also perform exception
    handling for those failed samples, if required will do substantial testing for the control
     Collaborates with other stakeholders to develop and implement consensual decisions. As necessary,
    partners with business continuity partners to create ways to improve efficiency
     submit the final testing document before client deliverables.

Education

B
Bachelor of degree (BSC) 2019

Work & Experience

C
Consultant June 2019 - Till Date

Perform control testing to support the IT Audit plan, and the SOX 404 internal control assessment.  Conduct test of design and test of control operation over ITGC / company level controls and effectively document the results ensuring that conclusions, findings and recommendations are adequately supported.  Carry out wide range of assignments primarily related to conducting IT audits of affiliates and production sites.  Information processing facilities audit to evaluate an organization's ability to produce applications even in disruptive conditions.  Perform Risk Assessment, identification, and Evaluation of Controls, prepare and document the same in Risk Control Matrix.  I am also part of walkthrough calls and perform interim and roll forward testing for the projects  Documenting test results and any issues identified while also providing recommendations to management.  For testing the control, I will listen to walkthrough calls, gather evidences, validate Completeness and Accuracy (C&A), Then pick samples based on frequency and risk also as per sampling guidelines and methodologies as well  I worked on control testing for audits such as SOX, SOC 2, or similar audits;  Broad audit across various areas of IT, including IT security, IT infrastructure, access management, IT application controls and IT general controls;  Ability to meet deadlines and daily cut-offs with satisfaction in the requirements.  As an internal auditor I provide reasonable assurance that the organization is in compliance by following rules, regulations, policies and procedures  Consulting business and technical partners to improve business effectively protecting information and other projects and duties focused on efficient operations and effective risk management  Planning and conducting ITGC audits to ensure compliance with regulatory requirements and internal policies.  Collaborating with IT and business teams to identify control weaknesses and recommend improvements.  Leading or participating in risk assessments and control gap analyses.  Conduct risk assessments on operational IT processes, procedures, and policies.  Reviewing and analyzing IT policies, procedures, and documentation for accuracy and completeness.  Evaluating the effectiveness of IT systems and processes, identifying vulnerabilities and proposing mitigation strategies.  Keeping up-to-date with industry trends and best practices in ITGC.  Communicating audit findings and recommendations to management and stakeholders.  Mentoring and training junior auditors, sharing insights, and providing guidance.

Be the first to review “Manish”