B. Shivakumar Devang

About B. Shivakumar Devang

Develop and maintain policies & procedures for a wide range of processes covering operational & functional domain. Ex: Information Security Policy, Physical Security Policy, Data center Policy, Revenue Recognition policy Ensure continuous improvement of internal control framework to integrate requirements arising from customer contracts, statutory requirements, standards and internal benchmarks. Continuous monitoring of key processes using management reports, metrics, scorecards to identify trends, potential risks & areas of improvement. Drive improvements using cross functional teams & industry accepted tools like six sigma, lean tools & design thinking etc. Interact with operation to identify areas of concern & act as a knowledge partner to solve real business problems. Share & replicate best practices & promote standardisation.Simplify the process of control management by removing redundancies and obsolete items in line with changing risk landscape. Conduct gap analysis / audits for statutory requirements covering GDPR, SOX, SOC, ITGC, SSAE, Contracts & ISAE. Making appropriate recommendation & implement controls to improve compliance & help management to focus effort & resource Plan & conduct internal audits as per audit plan, submit quarterly reports to audit committee and highlight key issues to get the necessary help, access and attention from management & board of directors Expertise in various audits like 3rd party vendor risks, integration of various sites, quality assurance, Incident management, Change management, problem management, User access management (physical and logical) & BCP & DR. Maintain good connects with external auditors and cater to audits of the company through relationship management & preparations for audit / external assessments. Ability to bring together different departments to meet the common objective of the organisation

Experience

1. Senior Manager Internal Audit

   Genpact

   Sep 2014 — Present · Hyderabad, IN

   Develop and maintain policies & procedures for a wide range of processes covering operational & functional domain. Ex: Information Security Policy, Physical Security Policy, Data center Policy, Revenue Recognition policyEnsure continuous improvement of internal control framework to integrate requirements arising from customer contracts, statutory requirements, standards and internal benchmarks.Continuous monitoring of key processes using management reports, metrics, scorecards to identify trends, potential risks & areas of improvement. Drive improvements using cross functional teams & industry accepted tools like six sigma, lean tools & design thinking etc.Interact with operation to identify areas of concern & act as a knowledge partner to solve real business problems. Share & replicate best practices & promote standardisation.Simplify the process of control management by removing redundancies and obsolete items in line with changing risk landscape.Conduct gap analysis / audits for statutory requirements covering GDPR, SOX, SOC, ITGC, SSAE, Contracts & ISAE. Making appropriate recommendation & implement controls to improve compliance & help management to focus effort & resourcePlan & conduct internal audits as per audit plan, submit quarterly reports to audit committee and highlight key issues to get the necessary help, access and attention from management & board of directorsExpertise in various audits like 3rd party vendor risks, integration of various sites, quality assurance, Incident management, Change management, problem management, User access management (physical and logical) & BCP & DR. Maintain good connects with external auditors and cater to audits of the company through relationship management & preparations for audit / external assessments. Ability to bring together different departments to meet the common objective of the organisation

Education

• Information Systems Audit & Controls Association (ISACA)

  CISA - 2016

  2015 — 2016

• Sheshadripuram Arts, Science & Commerce College, Sheshadripuram , Bangalore-20

  Bachelor’s Degree

  1992 — 1998

• Harvard University

  Finesse Program

  2017 — 2018

• INSAID

  Certificate in data science foundation

• Information Systems Audit & Control Association (ISACA)

  CRISC - 2017

  2016 — 2017