Manoj Kumar Chary Thota

GRC and IT Audit professional with 10 years of total experience, including 6+ years in ITGC testing, ISO 27001 audits, and enterprise risk management. Proven track record of identifying control gaps, driving remediation, and maintaining audit-ready documentation across SOX, PCI DSS, and GDPR frameworks. Skilled at translating complex regulatory requirements into actionable controls and building strong working relationships across IT, security, and business stakeholders.

Combines a finance and accounting foundation (AP/AR, treasury, fixed assets) with deep GRC expertise, bringing a well-rounded, controls-first perspective to audit and compliance work.

Security Consultant (GRC & IT Audit) - DBS Technology Services - Hyderabad, India

(2020-02)

• Maintained ISMS operations, including security policies, procedures, and supporting evidence, ensuring alignment with organizational and regulatory requirements.
• Supported ISO 27001 implementation and surveillance audits end-to-end, coordinating artifact collection, control tracking, and gap assessments.
• Executed ITGC testing across access controls, change management, and IT operations; documented results and drove remediation of identified gaps.
• Led Third-Party Risk Management (TPRM) activities, including vendor risk evaluations, questionnaire reviews, and follow-up on remediation actions.
• Partnered with the GRC team on risk identification and control alignment, maintaining accurate risk registers and compliance dashboards.
• Monitored PCI DSS compliance by gathering evidence and coordinating cross-functional activities with internal stakeholders.
• Managed audit documentation for both internal and external audits, ensuring completeness, version accuracy, and on-time submission.
• Collaborated with IT, security, and business teams to resolve control deficiencies and track audit findings through to closure.
• Utilized compliance tools and trackers to monitor controls, risks, and audit progress across multiple regulatory frameworks.
• Validated evidence and updated control statuses during periodic risk and control reviews, reporting compliance gaps to stakeholders.
• Performed access reviews and user access management checks to validate segregation of duties (SoD) and least-privilege compliance.
• Conducted root cause analysis on audit findings and coordinated corrective action plans (CAPA) with control owners.
• Contributed to Data Privacy Impact Assessments (DPIA) and supported GDPR compliance activities alongside the privacy team.
• Assisted in aligning internal controls to COBIT and COSO framework principles as part of ITGC and SOX readiness efforts.

Finance & Accounts Analyst - DBS Technology Services - Hyderabad, India

(2016-07 - 2020-01)

• Managed end-to-end Accounts Payable and Accounts Receivable processes, ensuring timely payments and collections.
• Processed vendor invoices, customer invoices, and staff reimbursement claims in compliance with company policy.
• Performed intercompany and related-party transaction accounting, reconciliations, and balance confirmations.
• Handled foreign currency transactions and accounted for exchange rate gains and losses.
• Capitalized fixed assets, maintained asset registers, and processed asset disposals and transfers.
• Calculated depreciation and Net Book Value (NBV); supported fixed asset audits and reporting.
• Managed treasury activities, including cash flow forecasting, bank reconciliations, fixed deposits, and fund transfers.
• Prepared financial reports and reconciliations and led month-end closing activities with a focus on accuracy and regulatory compliance.

MBA - Osmania University (2018)

B. Com - Vivekananda Government Degree College (2016)