Pulkit Vinayak Maini

Accomplished Cyber & IT Risk professional with over 3+ years of progressive experience in performing audit, compliance, and risk governance programs (SOC 1, SOC 2, SOX) and over 3+ years across industry vertical. Experienced professional with a strong background in IT audits for financial risk. Supported audits for clients undergoing SOC1 and SOC2 engagements, including key risks, control and testing procedures.

Performed

Walkthroughs of client processes, document key processes and controls, and test operating effectiveness.

Consultant at Grant Thornton Bharat LLP (2025-08 – Present)

Senior Associate at Grant Thornton Bharat LLP (2024-08 – 2025-08)

Trainee at Grant Thornton Bharat LLP (2024-02 – 2024-08)

Trainee at Digitas (2023-10 – 2024-01)

Consultant/Senior Associate/Trainee at Grant Thornton Bharat LLP (2024-02 – Present)

Key Responsibilities and Achievements

• Supported in SOX (Sarbanes-Oxley Act) control IT General Controls (ITGC) testing for system functionalities.
• IT General/Application Controls Reviews: Performed review of IT control processes with the motive of assessing effectiveness of the client control over IT applications/infrastructure. IT General Controls review includes review of logical access management, change management and backup management across various legacy (Oracle, and MS) and in-house applications. IT application/ automated controls review includes review of edit controls, maker checker controls, etc. across various business processes like Fixed Assets, Inventory.
• Performed review of physical security, and Human resources controls.
• IPE Testing: Executed information produced by entity (IPE) testing for major Indian automotive clients, ensuring data integrity and report accuracy within IT-dependent controls.
• Financial Audit and IT Integration Projects: Assisted financial audit teams in assessing IT Applications used for Financial Reporting purposes. This is done to provide assurance on the IT applications used for financial reporting purposes. The conclusion is based on testing of design and operating effectiveness of controls deployed by the client's management.
• Third-Party Risk Assessment Strategy: Supported the third-party risk assessment (TPRA) strategy for leading automotive industry client in India, ensuring effective risk identification and governance of external vendors.
• Delivered end-to-end SOC 1, SOC 2 and SOC 2+ HIPAA audit engagements, including managing the stakeholders, audit team, assessment and reporting, for both Indian as well as global clients.
• Experienced in draft Gap assessments, SOC1 and SOC2 reports, ensuring that all relevant findings, recommendations, and audit conclusions are clearly articulated. Proven success in strengthening control environments, and delivering assurance for Fortune 500 and large enterprise clients.
• Supported with performing and also reviewed Privacy Impact Assessments for multiple clients.

MCA in Computers – Jain deemed to be University, Bangalore

MSc in Chemistry – Punjabi University, Patiala