Rohit Batra

IT Audit and GRC professional with 4+ years of experience in IT risk, cybersecurity assurance, and regulatory compliance across global financial services at Goldman Sachs and RSM US LLP. ISO/IEC 27001:2013 Certified Lead Auditor with hands-on expertise across ITGC, SOX, SOC 1 & 2, GDPR, and DORA frameworks. Currently completing an MSc in Cyber Security at MTU, with applied research in AI-integrated security risk analysis.

Senior Analyst, Core Engineering Internal Audit at Goldman Sachs India (2024-11 – 2025-08)

• Led end-to-end IT and cybersecurity audit engagements across global technology environments, evaluating ITGC, access management, change management, vulnerability management, and incident response controls aligned to NIST, ISO 27001, GDPR, and DORA
• Produced process narratives, risk control matrices, and Management Action Plans communicating risk-rated findings to senior leadership and audit committees; conducted post-remediation validation to confirm control closure
• Assessed third-party vendor controls and ICT dependencies, evaluating service provider risk management frameworks against regulatory compliance obligations
• Mentored junior auditors on audit methodology and workpaper quality; served as Scrum Master managing delivery across multiple concurrent engagements

Analyst, Core Engineering Internal Audit at Goldman Sachs India (2023-05 – 2024-10)

• Performed ITGC control testing and walkthroughs across access management, change management, vulnerability management, and incident response; documented results in Risk Control Matrices
• Evaluated automated application controls and key system-generated reports (IPE/IUC), validating accuracy and completeness of data flows underpinning critical operational processes
• Assessed BCP and DR controls; contributed governance and risk input during incidents and significant technology changes

Associate II – Technology Risk Consulting, IT Risk at RSM US LLP India (2022-08 – 2023-04)

• Delivered IT SOX 404, SOC 1, and SOC 2 audit engagements for regulated financial services clients including banks, investment firms, and fund administrators; tested ITGC and ITAC design and operating effectiveness
• Evaluated technology controls across core banking systems, ERP platforms, and cloud infrastructures; identified control gaps and developed remediation roadmaps with defined ownership and timelines
• Translated technical IT findings into business risk narratives for management reports and client workshops; awarded Certificate of Recognition for exceptional performance

Associate I – Technology Risk Consulting, IT Risk at RSM US LLP India (2021-08 – 2022-07)

• Supported IT SOX and SOC audit engagements across financial services, technology, and manufacturing clients; produced process narratives, risk-control matrices, and ITGC workpapers
• Gathered and assessed audit evidence across applications, databases, and automated business processes to validate control design and operating effectiveness

Master of Science in Cyber Security – Munster Technological University (2026-09)

Bachelor of Engineering in Computer Science Engineering (Cyber Security) – Chitkara University (2021-07)