Senior Analyst, Core Engineering Internal Audit at Goldman Sachs India (2024-11 – 2025-08)
- Led end-to-end IT and cybersecurity audit engagements across global technology environments, evaluating ITGC, access management, change management, vulnerability management, and incident response controls aligned to NIST, ISO 27001, GDPR, and DORA
- Produced process narratives, risk control matrices, and Management Action Plans communicating risk-rated findings to senior leadership and audit committees; conducted post-remediation validation to confirm control closure
- Assessed third-party vendor controls and ICT dependencies, evaluating service provider risk management frameworks against regulatory compliance obligations
- Mentored junior auditors on audit methodology and workpaper quality; served as Scrum Master managing delivery across multiple concurrent engagements
Analyst, Core Engineering Internal Audit at Goldman Sachs India (2023-05 – 2024-10)
- Performed ITGC control testing and walkthroughs across access management, change management, vulnerability management, and incident response; documented results in Risk Control Matrices
- Evaluated automated application controls and key system-generated reports (IPE/IUC), validating accuracy and completeness of data flows underpinning critical operational processes
- Assessed BCP and DR controls; contributed governance and risk input during incidents and significant technology changes
Associate II – Technology Risk Consulting, IT Risk at RSM US LLP India (2022-08 – 2023-04)
- Delivered IT SOX 404, SOC 1, and SOC 2 audit engagements for regulated financial services clients including banks, investment firms, and fund administrators; tested ITGC and ITAC design and operating effectiveness
- Evaluated technology controls across core banking systems, ERP platforms, and cloud infrastructures; identified control gaps and developed remediation roadmaps with defined ownership and timelines
- Translated technical IT findings into business risk narratives for management reports and client workshops; awarded Certificate of Recognition for exceptional performance
Associate I – Technology Risk Consulting, IT Risk at RSM US LLP India (2021-08 – 2022-07)
- Supported IT SOX and SOC audit engagements across financial services, technology, and manufacturing clients; produced process narratives, risk-control matrices, and ITGC workpapers
- Gathered and assessed audit evidence across applications, databases, and automated business processes to validate control design and operating effectiveness
