Gauri Limaye

About Gauri Limaye

Technology Risk & IT Audit professional | 10 years across Banking, Consulting, Manufacturing, FMCG, Retail | AVP at Citi India, leading control assessments tied to regulatory commitments | ISO 27001 Lead Auditor |(ISC)² Certified in CybersecurityI am a Technology Risk and IT Audit professional with 10 years of experience across banking, consulting, manufacturing, and FMCG environments — currently serving as Assistant Vice President at Citi India. My work sits at the intersection of technology controls, regulatory compliance, and business transformation. At Citi, I co-lead control examinations tied to regulatory consent order commitments — assessing IT General Controls, Data Quality controls, and SDLC governance across all lines of business to ensure timely and accurate financial and regulatory reporting. It is high-accountability work where the output goes directly to regulators and senior leadership. Before Citi, I spent several years at PwC and KPMG in advisory and audit roles, leading teams across ITGC, SOX, application controls, and SAP GRC engagements. One of my most rewarding projects was building and deploying a Continuous Controls Monitoring tool at PwC — a solution that shifted our clients from point-in-time audits to real-time automated control assurance across access, configuration, cyber risk, and business process dimensions. My technical foundation is deep: IT General Controls and application controls testing across both external statutory audits and internal audit engagements, SAP GRC 12.0/10.1 implementation and support, SoD reviews, S/4HANA role design, RCM builds, SOC1/SOC2 report reviews, and ISO 27001 — for which I hold a Lead Auditor certification. I also hold a Certified in Cybersecurity credential from (ISC)².What drives me is not just finding control gaps — it is helping organisations build mature, proactive risk frameworks that hold up under regulatory scrutiny and support sustainable growth. I am particularly interested in the evolving intersection of AI governance, data risk, and continuous controls assurance. Open to conversations about Technology Risk, IT Audit, and GRC roles — primarily within BFSI, and open to the right opportunity across industries.

Experience

1. Assistant Vice President

   Citi

   Jan 2025 — Present · Mumbai, IN

   Co-lead control examinations for regulatory consent order commitments across financial, risk & regulatory reporting platforms.• Assess Technology General Controls, Data Quality Controls, and Automated Controls to identify gaps and drive remediation across transformation programs.• Evaluate SDLC maturity for data quality and compliance across strategic digital transformation initiatives.• Built AI-driven use cases to automate risk assessment tasks and improve daily control monitoring coverage.• Mentor team members on IT controls delivery, promoting cross-functional knowledge sharing.

Education

• SIES Graduate School Of Technology

  Bachelor of Engineering (B.E.), Computer Engineering

  2011 — 2015

• Indian Institute of Management, Indore

  PGCPM, Business Administration and Management, General

Skills

• Sql
• Sap Security
• Html
• Sap Authorizations
• Ecc Security
• Microsoft Office
• Microsoft Excel
• Sap Security Administration
• Sap Tdms
• Big Data
• Sap Grc Eam
• Sap HR Security
• Sap R3 Security
• Sap Grc Access Control
• Bw/Bi Security
• Databases
• Sap Basis