Shruthi Ganji

Detail-oriented IT Auditor with 3.5 years of experience, proficient in the audit lifecycle phases like fieldwork, walkthroughs, data analysis, sampling, evidence review, and final report preparation. Adept at identifying IT controls and audit trail weaknesses, discussing observations with clients, and contributing to effective remediation strategies.

IT Auditor - Capgemini

(2023-02)

• Experienced on IT General Controls, IT Application Controls, and SOX 404 Compliance testing.
• Participated in initial kickoff meetings to understand audit scope, objectives, and timelines for IT audits.
• Contributed to the planning phase by identifying key deadlines and documenting relevant contact information for internal and external stakeholders.
• Evaluated and tested the design and operating effectiveness of key IT controls, including Logical Access Management, Operational Controls, Backup & Restoration, Patch Management, Incident Management, and IAM Controls, ensuring adherence to organizational policies and standards.
• Collaborated with Control Owners to understand control objectives, address identified internal control weaknesses and exceptions and facilitate remediation efforts.
• Involved in testing user access management (access provisioning, SOD, Termination), change management in SAP ERP-MM.
• Reviewed the logs for failed background jobs (T-Code SM37).
• Exposure in testing three-way match control.
• Involved in review of SOC 2 reports.
• Prepared comprehensive work papers to document audit scope, procedures, findings, and conclusions, ensuring adherence to audit standards.
• Conducted user access reviews, ensuring proper documentation of the review process and authorization for the personnel performing the UAR.
• Verified the review of privileged user activity logs and obtained logs of special privileged rights for the audit period.
• Assessed password management configurations, including password parameter settings and AD integration status.
• Conducted risk assessments of third-party vendors.
• Tracked and monitored vendor performance against contractual SLAs and key performance indicators (KPIs), identifying and reporting on any deviations or performance issues.

BSC - Little flower degree college (2023)