Chinmay Kulkarni

About Chinmay Kulkarni

Most new auditors are thrown into ITGCs, SOC reports, and workpapers without a map. I know, because I was one of them. Today, auditors learn from my content how to simplify the audit game. When I started out in IT audit, I didn’t have a playbook. No one told me what to say in a walkthrough. No one explained how to structure workpapers. And no one warned me how lonely and unclear the first 2 years can feel. So I learned the hard way. Most people think audit is about checklists. I used to think that too until I started doing it. But here’s the truth no one told me. Auditing is more than SOX and control matrices. It’s about asking the right questions. Documenting clearly. And thinking like a risk advisor and not like a robot. I stayed back reworking control language. Sat through walkthroughs I didn’t fully understand. And slowly figured out what actually works what clients expect, how real audits run, and how to survive (and then thrive) in this career. Today, I share everything I wish I knew back then. Not as a thought leader. But as someone who’s still learning just with a bit more hindsight. I’m Chinmay, a Technology Risk Consultant at EY, where I audit the IT systems that power financial statements of public companies. In simpler terms, I help ensure the numbers are right by making sure the systems behind them are secure, controlled, and compliant. My goal? To build India’s most practical IT audit community one story, one lesson, one insight at a time. What I share? • ITGCs, risk-based auditing, SOX 404, SOC 1/2 • Control testing, documentation, and walkthroughs • Audit communication, mindset shifts, and career tips • Cloud, privacy (ISO 27001, 27701), and AWS insights • Frameworks like NIST, COBIT, ISACA, PCI DSS If you’re 0–3 years into your audit journey or managing a team that is, I’m building content for you. Because stories teach more than slides. And in audit, clarity is everything.

Experience

1. Technology Risk Senior

   EY

   Aug 2025 — Present · Hoboken, NJ, US

Education

• Vishwakarma Institute Of Technology

  Bachelor of Technology - BTech, Computer Engineering

  2017 — 2021

• Northeastern University

  Master of Science - MS, Information Assurance - Cybersecurity