Darshan Shah

About Darshan Shah

Over 15 years’ experience in technology risk roles and more than 12 years managing IT audit projects, with a strong background in client-facing positions.• Oversaw IT audits for clients with large ERP implementations and systems, participating in all phases of financial and security control integration, especially within pharmaceutical, consumer goods, and technology industries.• Highly skilled at collaborating with cross-functional teams and defining audit scopes, requirements, and deliverables.• Comprehensive experience throughout the GRC pre-implementation process and conducting ITGC & ITAC pre-implementation reviews for SOX compliance on ERP platforms such as SAP and Oracle.• Technical knowledge includes ERP analytics solutions, robotics development, and building CACM (Continuous Audit Continuous Monitoring) solutions using tools like ServiceNow Integrated Risk Management System.• Worked on SAP S4 HANA Cloud, MS D365, Salesforce, workday and Oracle ERP applications.• In advisory internal and external audit roles, assisted organizations with SOX compliance and technology risk challenges related to cloud infrastructure (AWS and Azure).

Experience

1. Senior Manager, Technology Risk

   EY

   Aug 2023 — Present · Boston, MA, US

   Led technology and integrated audits for Fortune 500 clients, managing teams of 5-10.• Audited SAP, Workday, Netsuite, Oracle and Microsoft Cloud applications, assessing controls in access, change management, SDLC, and operations.• Developed audit strategies and plans for efficient execution on client environment.• Evaluated emerging technologies including RPA, AI, and cloud platforms.• Conducted pre-implementation reviews for major finance transformations, delivering SOX control feedback to finance, IT, and engineering teams.• Acted as regional AI champion, guiding account teams on AI Governance and data readiness.• Applied continuous improvement and Six Sigma methodologies for audit efficiency gains.• Performed IT audits to ensure SOX compliance before major IT implementations, ensuring ITGC and ITACs are executing effectively.• Used AI tools for code reviews and SOC-1 evaluations for automation and developing use cases for AI.• Led end to end SOX IT Audit and communication with management on remediation and risk mitigation.

Education

• University at Buffalo

  Master's degree, Electrical, Electronics and Communications Engineering

  2007 — 2009

Skills

• Risk Management
• Sap Erp
• Sap Implementation
• Security
• Governance
• Sdlc
• Erp
• Internal Controls
• System Architecture
• Internal Audit
• Grc
• Auditing
• Cloud Computing
• Sap
• Management
• IT Audit
• Sap R/3
• Business Analysis
• Consulting