Ashish Bhandari

WORK HISTORY

EDUCATION

SKILLS

ABOUT ASHISH BHANDARI

Ashish is a seasoned Governance, Risk and Compliance professional with over 18 years of progressive experience providing assurance and advisory services for large organizations out of which, 11 years has been specifically with Deloitte India, U.S. and Canada offices. He is currently working as a Client Partner at Diligent, a Modern Governance Company and responsible for a multi million $ portfolio of 50+ enterprise customers, spanning across multiple industries for driving Customer Value and overall Success. He works with C-Level Executives to cater to their Enterprise Risk Management, Governance, Audit, Controls, Cyber Security, Analytics and Compliance needs, develop and help realize customer-based strategic road maps using our GRC solution suite. He also has extensive experience planning, managing and leading external audits under Public Company Accounting Oversight Board (“PCAOB”) and Canadian Public Accountability Board (“CPAB”) auditing standards, delivery of various Third Party Assurance (“TPA”) and Cyber/ IT/ Operational Internal Audit engagements in traditional and emerging technology risk areas.Ashish has managed large teams and successful delivered various assurance and advisory engagements involving evaluation of the design and implementation of internal controls for complex IT environment supported on multiple ERP’s & platforms. He has extensive knowledge of enterprise risk management and compliance functions, and various industry standards/ frameworks such as COBIT 5, NIST, New COSO – ERM, ISO 27001 & 27002, PCI DSS, GAPP, PIPEDA, GDPR, CSA’s CCM and AICPA’s Trust Services Principles. Ashish has worked in partnership with various levels of management (business and technology) to help them in their risk management, compliance and reporting activities. He also has experience in presenting results to audit committee, key members of executive management (C-Suite) internal audit functions, risk and compliance functions and external regulators. He is actively involved in practice development activities, sales and pursuits in the areas of IT Assurance, Third Party Assurance and IT Internal Audit.Skills:• Governance, Risk and Compliance• Analytics & Robotics• Information Systems Audit (External Audits following PCAOB Auditing Standards, SOX, CSOX)• Third Party Assurance (SOC1, SOC 2, etc.)• System Implementation Reviews• Cyber/ IT/ Operational Internal Audits• Project & Program Assurance• IS/IT Governance & Cyber Security• Enterprise Risk Management• Privacy and Data Protection