Gaurav Pandit

Technology Audit and Controls Leader with 17+ years of experience leading SOX programs, technology risk and GRC across global financial and consulting sector. Around 11+ years of Big 4 experience and currently Vice President at Morgan Stanley Capital International, driving enterprise-wide technology control design, automation, and AI risk governance across critical financial systems. Proven track record in strengthening governance and control environments, reducing audit findings, and partnering with leaders and Audit stakeholders to enable scalable, compliant, and transformation-driven technology initiatives.

Vice President, Business Technology Controls at Morgan Stanley Capital International (2021-11 – Present)

• Led SOX ITGC and application controls across multiple enterprise financial systems, ensuring control effectiveness over critical financial reporting processes and proactive identification of control gaps
• Designed and implemented enterprise-wide technology controls framework across SOX applications in scope, strengthening control coverage and reliability of financial reporting
• Drove technology control transformation by embedding controls into AI-enabled finance initiatives, establishing governance frameworks to manage emerging AI risks
• Supported the control owners in building the interface controls for all the financial application integration to minimize the manual reconciliations and improvise the operational efficiency
• Partner with finance and technology stakeholders to design interface and integration controls, reducing manual reconciliations and improving operational efficiency
• Led continuous control monitoring and automation initiatives using SAP GRC, AuditBoard, and Power Automate, improving efficiency and audit readiness
• Advised finance transformation programs on SOX and control implications, ensuring audit readiness and alignment with evolving business processes
• Led design and implementation of SAP GRC 12.0 and integration with ServiceNow enabling automated user access management and user access reviews and optimized organization specific SOD risk coverage
• Contributed to enterprise-wide regulatory and governance programs (SOX, SOC1/SOC2, ISO27001, BMR) through standardization of control frameworks, processes, and tooling

Associate Director, Digital Tech at KPMG Advisory Services Private Limited (2010-12 – 2021-11)

• Led multiple IT audit and SAP GRC transformation engagements across diversified sectors delivering regulatory compliance and strengthening control maturity for global clients
• Led and delivered various SAP GRC engagements (Access Control, Process control, Risk Management, Audit Management), SAP S/4 HANA/ECC/BW security, SAP IDM, SAP SOD and SOX control automation initiatives globally across diversified sectors
• Drove business development and pre-sales for technology risk and SAP GRC engagements contributing to practice growth
• Delivered SOD assessments, ITGC/ITAC reviews, and pre/post implementation control reviews across enterprise applications
• Supported and managed large-scale transformation programs including system upgrades, carve-outs, and control framework design

Sr. Executive L2, Enterprise security at Tech Mahindra Limited (2008-06 – 2010-10)

• Implemented SAP GRC access controls and RBAC for large-scale enterprise transformation programs
• Supported SAP security operations and ISO27001 ISMS initiatives including dashboards and compliance monitoring

Master of Business Administration in Information Technology – Symbiosis International University, Pune (2006-06 – 2008-05)

Bachelor of Engineering in Electronics Engineering – Mumbai University, Mumbai (2001-09 – 2005-05)