Hima Bharathi

ITGC / SOX Analyst with 3.5 years of experience in IT General Controls, SOX compliance, and control testing. Experienced in Access Management, Change Management, IT Operations, User Access Review, Privileged Access, control evidence validation, sampling, exception identification, remediation tracking, and audit documentation. Strong understanding of control design, operating effectiveness, TOD/TOE, risk and control assessment, and SOX compliance requirements.

Experienced in working with control owners and stakeholders to obtain evidence, perform testing, identify control gaps, and support remediation activities.

SOX Analyst - Volvoice Technology Pvt. Ltd.

(2026-05)

• Perform SOX control testing activities for IT General Controls.
• Support testing of Access Management, Change Management, and IT Operations controls.
• Review control evidence to determine whether controls operated in accordance with defined requirements.
• Perform sample-based testing and document testing results.
• Review user provisioning, modification, deprovisioning, and access review evidence.
• Validate change requests for appropriate approvals, testing, implementation, and supporting documentation.
• Review IT Operations evidence related to backups, job monitoring, incidents, and operational activities.
• Identify exceptions and control gaps during testing and communicate findings to relevant stakeholders.
• Support remediation tracking and follow-up with control owners.
• Maintain audit workpapers and supporting documentation.

ITGC / SOX Analyst - Cognizant

(2023-01 - 2026-04)

• Performed ITGC testing activities supporting SOX compliance requirements.
• Worked on Access Management controls including user provisioning, deprovisioning, user access reviews, and privileged access.
• Reviewed evidence to verify that access was appropriately requested, approved, provisioned, and reviewed.
• Performed Change Management control testing by reviewing change requests, approvals, UAT evidence, implementation details, and rollback plans.
• Supported IT Operations control testing covering backup monitoring, job monitoring, incident management, and problem management.
• Performed Test of Design (TOD) and Test of Effectiveness (TOE) procedures.
• Selected samples in accordance with defined testing methodology and evaluated supporting evidence.
• Identified exceptions and documented testing observations in audit workpapers.
• Worked with control owners to obtain missing or additional evidence.
• Supported evaluation and tracking of remediation activities for identified control gaps.
• Maintained organized audit documentation and testing results.
• Collaborated with internal stakeholders and audit teams to support timely completion of SOX testing activities.

Bachelor of Technology (B.Tech) - Computer Science and Technology - Godavari Institute of Engineering and Technology (GIET), Jawaharlal Nehru Technological University, Kakinada (JNTUK)