Prafull Bhardwaj
CISA
Hire this person
Send a job offer directly to this candidate
About
Strategic IT Audit and Risk Assurance Leader with 7+ years of experience delivering internal audit for Financial services, IT SOX, SOC 1/SOC 2/SOC 3, ISAE engagements. Skilled in control design evaluation, AI enablement, deficiency remediation, and stakeholder reporting to senior management and external auditors. Combines deep technical audit expertise with Business Development acumen to identify opportunities, manage client relationships, and support proposal/SOW development.
Known for strong communication, rapid learning, and leading teams to deliver high-quality audit outcomes. Seeking manager role to gain exposure to diverse risk and regulatory environments.
Experience
Associate Manager - Ernst & Young - India
(2025-05)
- Led internal audits for FS clients and IT General Controls (ITGC) audits for SOX/JSOX compliance across Banking, Telecom, Retail, NBFC, Oil & Gas, Manufacturing & Hospitality.
- Support AI enablement ITGC testing engagements that helping clients improve literacy, assess maturity, identify practical use cases.
- performed evaluation of IT Controls including Logical Access, Change Management, Security, and Computer Operations per COBIT frameworks.
- Analysed audit test results, identified control deficiencies and led remediation efforts; escalated critical IT risks to client and senior leadership
- Managed engagement delivery of 8,000–12,000 billable hours annually; supervised, trained.
- Liaised with External Auditors and stakeholders to ensure audit alignment, reliance, and regulatory compliance
- Executed Business Development activities: client relationship management, opportunity identification, proposal/RFP/SOW development, and revenue growth for IT Audit and consulting services.
Consultant - KPMG India LLP - Gurgaon, India
(2023-05 - 2025-05)
- Conducted ITGC and ITAC audits, including IPE testing, risk assessment and control effectiveness evaluation.
- Led SOC 1 Type 2 and SOC 2 Type 2 engagements, preparing testing documentation and audit reports in compliance with ISAE 3402 and global standards.
- Delivered IT audit services across Banking, Telecom, Retail, Manufacturing, NBFC, Oil & Gas and Hospitality, enhancing control and compliance posture.
- Collaborated with audit, risk, and advisory teams to support IRM, GRC, and internal and external audit initiatives.
- Executed the IT audit support engagements for BSR & Co LLP for Hospitality client.
- Involved in preparing the RFP and other business development initiative's.
Consultant - Deloitte India LLP - Gurgaon, India
(2021-12 - 2023-05)
- Worked on SOC 1 and SOC 2 engagements. Performed SOC testing focusing on Information Technology Domains such as Access Security, Change Management, Incident and Problem Management, Data Centre and Computer Operations, etc. and entity level controls for multiple clients in software, technology services, etc. (including fortune 500 companies) covering various locations of business operations.
- Performed Process Understanding Walkthroughs, Design Implementation (DI), Operating Effectiveness (OE) and Information Provided by the Entity (IPE) testing of controls for SOC 1 and SOC 2 reporting based on SSAE18 / ISAE3402 standards and Trust Services Criteria respectively.
Management Trainee - Genpact - Noida, India
(2020-10 - 2021-12)
- Performed the internal audits.
- Acquire, analyze and evaluate accounting documentation.
- Prepare and present reports that reflect audit results and document process.
- Act as an objective source of independent advice to ensure validity, legality and goal achievement.
- Identify loopholes and share risk aversion methods and cost savings.
- Maintain open communication with management and audit committee.
- Document process and prepare audit findings memorandum.
- Conduct follow up audits.
Senior Associate - HCL - Lucknow, India
(2019-01 - 2020-04)
- Pricing/AR reconciliation with pricing model understanding.
- Performing SOX audits.
- Contribute to knowledge management sessions within the practice.
Education
MBA - Finance & Risk Control - University Of Lucknow
BBA - International Business - University Of Lucknow
