Qualifications Summary
. More than three years' professional experience in IT, Financial,
Operational, and Security Audits.
. Core expertise in planning, executing and managing Business Process
Reviews, ITGC/Business process SOX audits, Application Control
Reviews, Financial and Operational audits, with prior experience from
a Big 4 professional services firm.
. Excellent knowledge of Sarbanes Oxley and COSO/COBIT framework.
. Excellent knowledge of AS400, IT Projects Audit, PCI Compliance audit.
. Team player with good inter-personal, verbal, and written
communication skills.
EMPLOYMENT HISTORY
Jos A Bank Clothiers LLC - Hampstead, MD
April 2013 - Present
Internal Controls Auditor
. Identified, evaluated, and audited IT general controls (ITGC).
ITGC domains tested include Logical/Physical security, security
administration, program changes and computer operations.
. Managed all phases of various IT, Financial and Operational
audits including audit planning, audit program development,
draft report preparation, corrective-action follow-up and
time/budget resource allocation.
. Profound understanding of internal control concepts and
experience in applying them to plan, perform, manage and report
on the evaluation of various business processes/areas/functions.
. Created process flow diagrams to document various business
processes using MS-Visio
. Inventory reconciliation for company's Distribution Centers
-Verifying the physical inventory with book balances.
. Served as a point of contact for external auditors while they
performed Application controls and ITGC reviews to ensure timely
completion of projects.
. Conducted the inspection of Data centers to ensure that
environmental/physical security controls exist and function as
intended by management.
. Worked with various business units such as treasury, human
resources and legal in order to ensure compliance with legal
regulatory guidelines.
. Created and maintained Issues Log throughout the duration of the
audit.
. Performed post-audit reviews to determine compliance with audit
recommendations.
. Prepared and presented reports and recommended corrective
actions to audit committee.
. Reviewed business continuity and disaster recovery plans.
. Assessed company's internal controls to ensure that the control
objectives are properly designed as related to management
assertions, and are adequately mapped to overall corporate
business strategy.
. Performed and prepared adequate documentation of the Business
process review of the sales and revenue, purchasing through to
payables, payroll and inventory process cycles using a risk and
control matrix, flowcharts and process mapping.
Price Waterhouse Coopers LLC (PwC) - Florham Park, NJ
February 2012 - April 2013
IT Auditor
Colgate-Palmolive
. Developed audit programs, work paper documentation, lead all
phases of audit engagement activities such as entrance, interim,
roll forward and exit conferences.
. Conducted risk based audit approach for determining Audit Scope,
Audit Universe, Materiality and Compensating Controls.
. Analyzed, evaluated, and communicated IT control effectiveness /
ineffectiveness to senior management.
. Managed various Business and IT General Controls SOX (logical
and physical security; program changes; and computer operations
reviews) engagements for various domestic (US) and international
locations.
. Performed audits including review of various Financial, Business
Process and IT General Controls.
. Performed internal and external IT risk assessments, conducted
gap analysis against industry standards, and provided
recommendations on mitigation options.
. Tightened controls by analyzing prior audit results to pinpoint
the areas of deficiency.
Other Clients (Atlas Air, International Flavor and Fragrances, Weight
Watchers International Inc)
. Assessed clients' controls to ensure that the objectives are
properly designed as related to management assertions, and are
adequately mapped to overall corporate business strategy.
. Developed Audit Planning memo using Risk Based approach to scope
the yearly audit.
. Performed and reviewed IT General Control walk-through and
testing.
. Reviewed incident ticket severity levels (high, medium and low)
for compliance with the agreed upon Service Level Agreement
(SLA).
. Performed security and access controls review, which included
logical access, security administration, program changes,
operating system and database reviews.
. Lead the review and evaluation of the purchasing through to
payables business process through conduct of interviews, review
of process procedural documentation and walkthrough of business
process with key client personnel.
. Conducted Audit interviews and assignments, reviewed work papers
and reports, documented and analyzed Audit evidence.
Ernst and Young LLC (E&Y) - 5 Times Square, Manhattan, NY
September 2010 - February 2012
Consultant
Walt Disney World
. Created project scope initiation, planning, definition,
verification documents and implemented formal change control.
. Responsibilities included keeping track of the following:
Project Scope, Budget v/s Actual (BvA), Procurement,
Communication, Risk and Deliverables.
. Excelled in time management and team work to meet deadlines.
. In change management, verified compliance with version controls,
notification, escalation, emergency access to production
procedure and approvals for IT and business initiated change
requests.
. Responsibilities included assessment of information technology
internal controls based upon the CobiT framework: IT general and
application controls, information security, systems development,
change management, computer operations, risk management, SAS 70
assessments and regulatory compliance.
Other Clients (Warner Music Group, Inc, DSM Nutrition, Link Theory,
Time Warner Inc)
. Planned and directed audits related to companies policies,
procedures, IT systems and business processes.
. Worked with various business units such as treasury, human
resources and legal in order to ensure compliance with legal
regulatory guidelines
. Performed CAAT on depreciation using an ACL 9 Script.
Keane Inc - Gurgaon
July 2005 - December 2007
Jr. Business Analyst (BA)
. Involved with end user meeting to get requirements for new builds,
enhancements of the existing system
. Grouped requirements and legal entities to identify business
functionality, requirement, process information and flow
. Prepared Business Requirements Documentation in the form of AUC
(Application Use Case) including Business Rules, Use case,
Activity, Statechart and Sequence diagrams to analyze the system
using UML
. Coordinated daily team activities to ensure timelines are met
and prepared reports on the progress of assigned tasks
. Extensively used Excel functions in development, focusing on
read/write integration to databases
. Conducted GAP analysis to access the compatibility of existing
system infrastructure with new business requirement
. Participated in the bug review meetings, updated requirement document
as per business user feedback
TECHNICAL SKILLS
Languages: SQL, HTML, XML
Application Software: MS Office Suite, MS Project, Photoshop and Visual
Studio
Languages Workflow Tools: MS Visio
Databases: DB2, MS-Access, SQL Server 2008
education
University of Massachusetts, Boston, MA
Masters of Science, Information Technology (July/2010 / GPA: 3.5)
Masters of Business Administration, Accounting and Information Technology
(December/2009 / GPA: 3.6)
University of Rajasthan, India
Bachelor of Science in Information Technology, (June/2005/Class standing:
Top 1%, University standing: Top 10%)