Suruchi Pilania

Reviewed application-level IT General Controls (ITGCs), including audit trails, logging and monitoring, user access management, data flow and change controls, to evaluate the effectiveness of security and compliance controls. Conducted ITGRC (Information Technology Governance, Risk, and Compliance) audits for clients across diverse industries to assess adherence to regulatory standards, organizational policies, and best practices.

Conducted

Third-Party Risk Management (TPRM) audits for vendors across diverse industries to assess adherence to information security standards, risk management practices, HR security, asset management, access control, etc

Senior Associate - BDO India

(2025-06 - 2026-05)

• Reviewed application-level IT General Controls (ITGCs), including audit trails, logging and monitoring, user access management, data flow and change controls, to evaluate the effectiveness of security and compliance controls.
• Conducted ITGRC (Information Technology Governance, Risk, and Compliance) audits for clients across diverse industries to assess adherence to regulatory standards, organizational policies, and best practices.
• Conducted Third-Party Risk Management (TPRM) audits for vendors across diverse industries to assess adherence to information security standards, risk management practices, HR security, asset management, access control, etc
• Supported ISO 27001 audits by assisting in the evaluation of controls, documentation, and processes to ensure compliance.
• Conducted Core Banking System (CBS) implementation audits to assess the effectiveness of controls including backup, logging, access management, data center and disaster recovery (DC-DR) setup, change management, release management, version control, etc.

Associate Information Security Auditor - ANB Solutions Private Limited - Mumbai

(2023-02 - 2025-05)

• Conducted application audits for Loan Management Systems (LMS), Loan Origination Systems (LOS), Human Resource Management Systems (HRMS), and Treasury applications, evaluating compliance with organizational policies, regulatory requirements, and internal control standards.
• Assessed the design and operating effectiveness of application controls, including user access management, user access reviews (UAR), audit trails, logging and monitoring, interface controls, input and processing controls, data flow validation, incident management, backup and recovery, and change management, identifying control gaps and recommending remediation.
• Conducted audits of ITGC and ITAC controls like Asset Management, Change Management, User Access Review, Backup Management, Incident Management, Access Management, Input Validations, Input Processing,Audit Trail and many more.
• Led and executed comprehensive application audits for compliance system, loan management and many more.
• Conducted IRDAI Cyber Security Audits, RBI Cyber Security Audit, on-site consultant control, vendor audit and NCIIPC Audit.
• Conducted application security testing using Burp Suite to identify vulnerabilities.
• Prepared detailed audit reports, highlighting findings and providing recommendations for enhancing security measures.
• Worked for Banking sector, payment industry, government agency.

MSc - Digital Forensics - Rashtriya Raksha University (2021 - 2023)