Nagendra babu Guntuka

IT Audit and GRC professional with 2+ years of experience in ITGC controls testing, SOX 404 compliance, and ISO 27001:2022 implementation. Hands-on experience across access management, change management, and backup operations. Certified ISO/IEC 27001:2022 Lead Auditor (TUV SUD / CQI-IRCA).

Currently pursuing ISACA CISA. Familiar with COSO-ERM, COBIT, and SOC 2 frameworks. Strong foundation in evidence collection, risk control matrices, audit fieldwork, and working with control owners to remediate gaps.

IT Audit & Compliance Analyst - I Base IT Company

(2025-05)

• Conducted ITGC control assessments performing Test of Design (TOD) and Test of Effectiveness (TOE) across Access Management, Change Management, and Backup operations.
• Supported SOX 404 audit cycles by testing internal controls for applications and infrastructure.
• Coordinated with control owners to collect audit evidence, communicate control gaps, and track remediation progress.
• Performed user access reviews ensuring compliance with least privilege and segregation of duties (SoD) principles.
• Managed user access lifecycle including provisioning, modification, and deprovisioning, verified against approved requests and organizational policies.
• Enforced password policy controls covering complexity, expiration, and account lockout settings.
• Followed up on open audit observations and contributed to closure within defined SLA timelines.
• Participated in audit fieldwork, process walkthroughs, and ensured adherence to audit methodology standards.

GRC & ISO 27001 - Isecurion

(2024-11 - 2025-03)

• Assisted in ISO 27001:2022 implementation and conducted internal audits at client locations to assess compliance with ISO 27001 and SOC 2 Type 2.
• Supported the full ISO 27001:2022 certification lifecycle including evidence collection, control validation, risk assessments, and certification readiness activities.
• Maintained Risk Control Matrices (RCM) and coordinated audit documentation for internal and external reviews.

IT Audit - AL Global Advisors LLP

(2024-02 - 2024-09)

• Executed Test of Design (TOD) and Test of Operating Effectiveness (TOE) procedures under SOX compliance engagements.
• Worked together with control owners to collect evidence, communicate gaps, and track remediation efforts.
• Drafted and shared risk matrices and test results with senior auditors and stakeholders.
• Followed up on open audit observations and contributed to closure within defined timelines.
• Participated in audit fieldwork, assisted process walkthroughs, and ensured compliance with audit methodologies.
• Provided control testing documentation in compliance with audit guidelines and ensured
• Prepared audit evidence packages and maintained testing workpapers for management review.
• Enforced password policy controls as part of IT general controls testing.

Bachelor of Computer Science - Adikavi Nannaya University (2023)

Intermediate - MPC (AP) - Board of Intermediate Education (2017)

SSLC (AP) - Board of Secondary Education (2014)