Rajesh Kumar

About Rajesh Kumar

Around 4 years of experience in IT Audit, IT General Controls (ITGC), and SOX 404 compliance, with a focus on access management, change management, and IT operations. Skilled in performing Test of Design (TOD) and Test of Operating Effectiveness (TOE) to assess and validate IT General Control environments. Proven track record of supporting financial institutions and global enterprises in strengthening IT controls, achieving audit readiness, and ensuring compliance with regulatory requirements. Experienced in identifying control deficiencies, recommending practical remediation, and partnering with stakeholders to drive timely resolution. Industry exposure spans Banking, Finance, and Construction, with strong ability to adapt to dynamic IT environments. Recognized as an effective communicator with a collaborative, risk-based approach to decision-making.

Experience

1. Senior Associate

   Innova Solutions

   Aug 2022 — Present · Chennai, IN

   Worked on various ITGC controls including Access Management, Change Management, and IT Operations.• Performed IT internal control assessments as part of SOX compliance.• Conducted testing of IT General Controls such as User Provisioning, User De-provisioning, User Access Reviews, High Privilege Access, and Password Configuration Settings.• Audited controls based on four key guidelines: Risk, Control, Vulnerability, and Threat, in line with relevant policies and regulations.• Collaborated closely with control owners to conduct process walkthroughs and ensure accurate understanding of control environments.• Performed detailed process walkthroughs to assess control design and operational effectiveness.• Executed control assessments aligned with SOX 404 compliance requirements using both Test of Design(ToD) and Test of Effectivemess (ToE) methodologies.• Assessed the Test of effectiveness controls (TOE) by performing sample-based testing over different periods using various testing strategies.• Documented processes, audit findings, and recommended remediation actions, while maintaining open communication with client management.• Escalated issues and exceptions promptly to team leads or subject matter experts for resolution.• Possess working knowledge of SOC 1 and SOC 2 reports, including understanding of control objectives and system descriptions.• Familiar with reviewing SOC 1 and SOC 2 reports to assess third-party service provider controls and identify potential risks.