Currently deployed on SOX/SOCR testing for multiple industries including Manufacturing/ Telecom/ Healthcare etc. Some of my key responsibilities include:- Designing the request list- Understanding the client environment - Preparing Agenda’s for walkthroughs.- Tracking & Reporting - Worked on GRC tools such as AuditBoard, Workiva etc.

Worked on IT general controls such as IT Manage Access (UAR, Termination Testing), IT ManageChange (SOD) & IT Manage Operations (Backup & Job Scheduling). Documented walkthrough procedures & performed TOC's. Designed the framework around IT security Policies based on ISO-27001. Prepared pre- assessment questionnaires along with risk mapping.

Perform third Party Information Security Assessment (TPISA) which include assessing the supplier’s response as per the ISO-27001 guidelines & Providing a Remedial solution as per the Gaps/shortcomings or major findings. Conducted pre-assessment for new Business which includes verification of Documents/Evidence as provided by the supplier.Worked majorly for Insurance & Media sectors as a part of SOX & SOC audit.

Involved in RSA Migration Activity, which includes migrating the defender users to RSA. Perform refresh & discovery tasks using a PAM tool called Lieberman, which include Server on- boarding and off-boarding; Password takeover for the discovered systems.