Manager - IT Audit - Telecom Domain

Manager - IT Audit

JD :

- Led the engagements in review and testing of SOX-404 compliance in US & Singapore locations. This involved in executing a comprehensive IT Audit program for the worldwide evaluation of management controls, operational efficiencies, and various financial issues.

- Recommend improvement of management and internal controls designed to safeguard Company resources, promote Company growth and ensure compliance with the Sarbanes-Oxley Act requirements.

- Reviews of the IT- Disaster Recovery (IT-DR) Planning for one of the leading telecom client which involves Risk Assessment for critical IT applications/systems, DR site evaluation,Business Continuity Plan for all the functions as per the project requirement e.g., evacuation plans, site emergency management plans, call trees, business continuity plans, crisis management plans etc.

- Led the engagements to conduct the SAP Security Reviews and Testing for multiple Telecom Clients in India which involves reviewing of authorization and Segregation of Duties and audit of BASIS controls (various technical and general controls).

- Developed and implemented Information Security policies and standards for the leading data analytics firm to align with ISO27001 (ISMS) regulations pertaining to security. Assisted the client during ISO 27001 certification audit and in closure of non-conformances.

- This project includes the Gap assessment at documentation level, formulation of security policies, Risk assessment, and Vulnerability assessment, Statement of applicability, security awareness training, control implementation support and developing a mechanism to measure the effectiveness of ISO27001 Standard.

- Implemented the two modules (ACCG & CCG) of Oracle GRC for one of the world's leading Media conglomerate. The project include the configuration of controls based on sensitive transactions with the help of Models, Controls and Conditions, user access controls to ensure effective SOD monitoring with the help of Entitlements, Access Points and performed the Functional Testing of the configuration in quality environment for both the modules with the use of test scripts.

Urvashi Gupta