Nipun Tomar

Bringing over 15+ years of total experience in Project management, ITAC, ITGC, Role redesign, Risk management, control framework and GRC, also have extensive experience on IAM area (SAP, AD, PAM, SSO, access control, authentication) and Cyber Security.

Sr. Auditor - Colgate - Mumbai, India

(2025-09)

• Analyzed the impact of control issues on ITGC and automated controls affecting financial reporting.
• Define and track modernization KPIs (e.g., system performance, incident reduction, user adoption) to measure realization of business value.

Architect - Argano - Mumbai, India

(2024-12 - 2025-09)

• Designed, implemented, and worked on the CI/CD for the organization’s GRC program.
• Effectively coordinate with IT, stakeholders, vendors, and process owners to resolve access issues and mitigate risks.
• Managing the team and assisting users in delivering and resolving complex issues.

Snr IT Identity & Access Architect - Clariant - Mumbai, India

(2022-02 - 2024-09)

• Working globally with teams in Audits and coordinating with the Audit teams and preparing the data for the leadership.
• Managing GRC, SAP Security, MDG, SAP IDM, SAP AIG, SOX, HANA and Risk\compliance\Audit
• KPI generation for internal control and group security related to certain sensitive SAP systems and handling a team of around internal and externals.
• Experienced in SOX and IT internal controls audits, including reviewing and improving control designs.
• Shailpoint, SSO and SNOW tools.

Anlayst - Solvay - Mumbai, India

(2017-10 - 2022-02)

• Support all activities of the Financial Compliance team related to the governance and further development of the control framework and the annual control cycle including self-assessment, testing of controls, and reporting.
• Perform testing of automated controls defined in RCM to ensure their effectiveness in mitigating risks and achieving compliance objectives.
• Monitor the performance of automated controls and provide ongoing support to address any issues or enhancements needed.
• Assist Business Process Owners in conducting analysis of Segregation of Duties (SoD) conflicts and executing mitigating controls.
• Managed coordination of ITGC testing with IT department, identifying control deficiencies and suggesting enhancements for operational efficiency and control environment.
• Design audit checklist and audit client projects in SAP and information.
• Coordinate data migration and transformation activities from iSeries systems to modern databases and cloud platforms, ensuring data accuracy and integrity.
• Implement phased modernization strategies (e.g., re-hosting, re-platforming, or re-engineering) to minimize business disruption and manage risk.
• Managed the team of GRC, and Risk\compliance\Audit team for more than 18 team members
• Management of vendors for the L0, L1 and L2 deliverables of SAP Authorizations, GRC, ECC, HR, SRM, CRM, Solution Manager-charm, Success Factors, GTS, MDG, Neptune GW

Team Leader - Capgemini India Pvt. Ltd - Mumbai, India

(2014-02 - 2017-10)

• Participated in the requirement gathering- blue print workshops, designed the role, Role Build, user testing and Go live for various components such as ECC, CRM, SRM, Solution manager and Audit
• Create ECATT and LSMW scripts for mass user master data loading during cutover
• Additional responsibilities of CHARM - SAP Solution Manager

Consultant - CSC India Pvt. Ltd - India

(2010-04 - 2014-02)

• Creating and maintaining user master data according to the security policies and procedures
• Successfully completed End-to-End implementations and various upgrades and enhancement projects
• Conducted the internal and external audits
• Worked on internal information security audit activities- Performed internal IT audit

Software Engineer - Quinnox Consultancy Services Pvt. Ltd - Mumbai, India

(2008-03 - 2010-03)

• Manage the utilization of Global SAP Security Team to ensure the support to the Business requirements
• Manages the KPIs, Team Development and Learning for Global SAP Security Team
• Consistent traveler to Europe (mainly France, Belgium and Italy) for the project's meetings, requirement gathering, SoD, Audits, Upgrades, License management
• Created new Change Management processes for deleting roles in Production environment
• Worked on internal information security audit activities- Performed internal IT audit
• Maintaining an effective Information Security Management System (ISMS)
• Part of the ISO 27001 implementation

MBA - IT & Operations - National Institute of Business (2019-01)

Bachelor of Engineering - IT - University of Rajasthan (2006-01)