Experience
I’m a CISA and Senior Consultant in Digital Risk & IS Audit at EY. I work mainly with financial services organisations on SOX and IT controls assurance, technology risk and AI governance. My role covers planning the audit, testing controls and explaining what needs to change.
Employment
EY · Senior Consultant, Digital Risk & IS Audit
August 2024–present
I lead SOX 404 and IT controls work. My recent AI governance work has included GitHub Copilot, Microsoft 365 Copilot and third-party recruitment tools. I reviewed who owned those systems, what data they could access, and whether model validation and bias testing supported their use. I also contributed to AI governance and acceptable use policies. EY recognised me with its Client Extraordinaire award.
AI governance and GitHub controls
Protiviti · Consultant 3, Technology Risk & IT Audit
June 2023–July 2024
I worked on IT audits and risk assessments, from process walkthroughs to tests of design and operating effectiveness. I wrote up findings, discussed them with control owners and followed up on corrective actions.
Nangia & Co LLP · Senior Analyst, Cybersecurity & IT Audit
June 2022–June 2023
I worked on cybersecurity, privacy and data loss prevention reviews. I mapped how sensitive information moved between systems and teams, reviewed controls around its access and handling, and helped document information security policies.
Cloud security, ISMS and privacy
Tata Consultancy Services · Intern, Advanced DAST
June–August 2020
I tested web applications and documented vulnerabilities during a remote internship in dynamic application security testing.
Audit delivery and reporting
At EY and Protiviti, I scoped risk-based engagements, estimated effort and prepared delivery plans. I built risk and control matrices that connected the scope to the tests and evidence. I kept workpapers and evidence in AuditBoard, TeamMate+ and RSA Archer.
When I reported a deficiency, I assessed its severity, looked for compensating controls and considered the potential impact on financial reporting. I used executive audit reports and Power BI dashboards to explain what we found. I turned the findings into prioritised management action plans for senior leadership.
Audit automation
- Leaver access reconciliation. I wrote a Python script to match Active Directory and application accounts with HR departure records. It reduced manual reconciliation effort by about 70%.
- Privacy screening. I built a Python scanner using regular expressions and SQL. It screened more than 1,000 logs, PDFs and spreadsheets and helped bring the audit timeline from weeks to days.
Credentials and education
I hold the CISA and CEH certifications. I completed lead auditor training in ISO/IEC 42001 and ISO/IEC 27001. See all credentials and training.
Education
MBA in Information Technology and Finance. Swami Vivekanand Subharti University, Meerut, 2022–2024.
B.Tech in Computer Science and Engineering. Madhyanchal Professional University, Bhopal, 2018–2022.