Madhavi Latha Nampalli

WORK HISTORY

EDUCATION

ABOUT MADHAVI LATHA NAMPALLI

I am a Governance, Risk & Compliance (GRC) professional with 3.7+ years of experience in IT Audit, SOX/SOC compliance, and IT General Controls (ITGC) testing. Currently working as a Senior Analyst at Capgemini, I specialize in strengthening IT control environments, supporting audits, and improving identity and access management processes.My expertise spans:* IT Audit & Compliance – Conducting SOC 1, SOC 2, SOX, and ITGC audits, performing walkthroughs, testing design & operating effectiveness, identifying control deficiencies, and supporting remediation & retesting.* Identity & Access Management (IAM) – Managing SAP GRC provisioning, SoD reviews, User Access Reviews (UAR), and enforcing Role-Based Access Controls (RBAC) to reduce risks of excessive access.* Information Security Controls – Supporting SIEM audits, event monitoring, incident response validation, and ISO 27001 implementation.* Collaboration & Stakeholder Engagement – Partnering with auditors, control owners, and business stakeholders to deliver audit evidence, ensure compliance, and drive process improvements.I am ISO 27001:2022 Lead Implementer certified and proficient with tools such as SAP GRC, ServiceNow, CyberArk, SIEM, and Azure DevOps.I’m passionate about helping organizations build secure, compliant, and resilient IT environments while bridging the gap between audit, compliance, and business operations.