Priya Palanisamy

About Priya Palanisamy

A graduate of Kongu Engineering College with a BE in Computer Science Engineering. Joined…

Experience

1. Sox Audit Itgc Grc Risk Assessment

   HCLTech

   Jan 2022 — Present · Chennai, IN

   SOX ITGC Compliance* Testing of key ITGC controls to make sure the deficient samples are remediated before the auditPreparation of requests list for the Internal SOX audit.* Testing and verification of evidence for completeness & accuracy* Testing of termination controls for all the in-scope applications & infra towers to make sure terminated user access are removed as per the policy and drafting the report for all the implemented controls* Conducting user access review and report preparation for the in-scope applications* Educating the teams to avoid the gaps in the access provisioning and change management process identified as a part of internal assessment* Validation of access provisioning documents of the in-scope applications and suggesting the teams with process improvisation steps* Coordinating with the External auditors and application teams during audit and suggesting the remediation process for the gaps identified Implementation of new controls to remediate the deficiency identified in the external auditVendor Risk Assessment* Articulate, identify, assess, measure and monitor information risk by performing Vendor risk assessments regularly* Determine the correct set of vendor questionnaire to be sent for vendor based on the scopeRegularly follow up with all vendors to get the response and walkthrough if they have any questions* Drafting the assessment report with all relevant gaps identified and remediation’s plannedEstablishing & maintaining Third party Risk Management programGovernance, Risk & Compliance* Work with system owners and technical teams to prioritize and remediate identified threats and vulnerabilities through Audits or Risk assessments* Run book validation of all the applications team to meet the compliance requirements* Prioritize the security threats and risks pertinent to the company’s business objectives and compliance requirements by sending awareness email to the teams

Education

• Kongu Engineering College

  Bachelor of Engineering - BE

  2013 — 2017