Akankshya Mohapatra

Certified ISO/IEC 27001:2022 Lead Auditor (CQI-IRCA) with 3+ years of experience in IT Risk, ITGC, SOX compliance, Internal Audit, and Information Security Governance across Financial Services, Consulting, and Logistics sectors. Experienced in IT General Controls (ITGC), IT Application Controls (ITAC), Risk Assessment, Vendor Risk Management, Regulatory Compliance (RBI), ISO 27001 implementation, and audit lifecycle management. Strong exposure to control testing, risk mitigation, policy development, access management reviews, change management audits, and external audit coordination.

Seeking opportunities in GRC, IT Risk Advisory, Information Security Consulting, and IT Controls.

Associate Manager – IT & Compliance at ANNAPURNA FINANCE (P) LTD (2024-12 – Present)

• Lead IT compliance and information security audits, including audit planning, fieldwork, control testing, evidence review, reporting, and remediation tracking.
• Manage ISO 27001, RBI, ITGC, cybersecurity, data protection, and regulatory compliance activities.
• Develop audit programs, control checklists, Risk Control Matrices (RCMs), compliance reports, and audit documentation.
• Perform risk assessments, control gap analysis, evidence validation, and deficiency assessment across IT and cybersecurity domains.
• Coordinate with IT, Risk, Internal Audit, business teams, vendors, and external auditors to obtain evidence and close audit observations.
• Support GRC and risk management processes, including risk registers, compliance tracking, control monitoring, and remediation.
• Contribute to process improvements, audit readiness, control standardization, and continuous improvement of compliance practices.

Associate Program Manager – IT Compliance at DELHIVERY PVT LTD (2023-01 – 2024-12)

• Conducted ISO 27001-aligned internal audits, including audit planning, walkthroughs, fieldwork, evidence collection, control testing, reporting, and remediation.
• Developed and maintained IT compliance policies, procedures, audit programs, control documentation, and compliance reports.
• Performed ITGC and information security control assessments, identifying gaps and recommending remediation actions.
• Managed audit evidence collection, observation tracking, remediation, and audit closure across stakeholders.
• Conducted vendor/third-party risk assessments and supported enhancement of compliance and risk management processes.
• Supported ISO 27001/ISMS audit readiness, documentation management, and continuous improvement initiatives.

Associate – Solution Advisor | IT Risk & Audit at DELOITTE USI (2022-01 – 2023-12)

• Executed SOX ITGC audits through planning, walkthroughs, fieldwork, control testing, evidence review, deficiency assessment, and reporting.
• Prepared Risk Control Matrices (RCMs), audit workpapers, control testing documentation, and audit reports.
• Assessed IT controls, ICFR, access management, change management, backup/recovery, and IT operations.
• Identified control deficiencies and compliance gaps and communicated remediation recommendations to stakeholders.
• Collaborated with global stakeholders and control owners to obtain evidence, resolve audit issues, and support audit closure.
• Supported audit methodology, quality documentation, and compliance with professional audit standards.

MBA in Finance & Marketing – KIIT University (2020-01 – 2022-12)

B.Tech in Electrical Engineering – KIIT University (2015-01 – 2019-12)