Nachiket Deshpande

About Nachiket Deshpande

I am an experienced Audit and Risk professional with 7+ years in the Auditing domain, including 5+ years of specialized expertise in IT Audit, Internal Audits, Cybersecurity, and SOX Compliance across global clients.My core strengths lie in: • ITGC & ITAC Audit: Design and effectiveness testing of IT General Controls and Application Controls in complex business environments. • Cybersecurity Controls Review: Hands-on experience in auditing domains like Data Protection, Data Management, Incident Management, IAM, Technology Resiliency, Security Operations & Technology Operations, Security Configurations ensuring compliance with global frameworks. • SOX Compliance & RCM Development: End-to-end implementation of SOX controls (As-Is / To-Be), Risk Control Matrix development, and walkthroughs for US and UK entities. • Internal Audits: Execution of financial and operational audits for clients in the BFSI and manufacturing sectors, identifying process gaps, inefficiencies, and risk exposures.With a strong foundation in both technical and business controls, I thrive on delivering insights that enable resilient, compliant, and value-driven IT ecosystems. Passionate about technology risk, process optimization, and driving control maturity for evolving digital landscapes.

Experience

1. Senior Consultant

   EY

   Oct 2025 — Present · Bengaluru, IN

   Worked on designing the Governance framework for leading UK based stock exchange group, Control Assurance & QA SOPs, building Design Evaluation and Operating Evaluation testing templates, Project Status Trackers, Walkthrough Process Narratives for GCC operations for development of centralized control testing center of excellence-Worked in leading UK based stock exchange group’s 3rd line focusing on internal audit’s fieldwork stage for review related IT Access Management, Infrastructure (MS-SQL DB) user access review, UAT process review and automation Code Logic review of daily reconciliation for events and transcripts process for languages such as Python- Nachiket has contributed to comprehensive IT audit programs for major clients, supporting internal audits and first line of defense (1LoD) activities. His experience spans ITGC SOX 404 testing, IT application controls, cybersecurity assessments, and risk evaluations across critical IT domains- As part of control testing program for a leading investment bank, his responsibilities included- Preparing data and evidence request list, conducting walkthroughs with control owners - Drafting process understanding documents, design assessment, operating effectiveness and audit reports - Performing IPE validation for the evidence provided by the client- He has performed comprehensive cybersecurity controls testing and risk evaluations across key domains, including data protection and data management (ensuring cryptographic compliance and safeguarding data integrity and confidentiality), security operations (SIEM monitoring, log retention, and incident remediation), secure technology development (SDLC), and Identity and Access Management (IAM).

Education

• The Institute of Chartered Accountants of India

  CA- Intermediate, Accounting and Finance

  2015

• Savitribai Phule Pune University

  Bachelor of Commerce - BCom, Accounting

  2012

• Savitribai Phule Pune University

  Masters, Business/Commerce, General

  2015