S Subramaniyam

About S Subramaniyam

I am a highly skilled and dedicated professional with extensive experience in the fields of audit, risk management, and compliance. Throughout my career, I have worked for top-tier organizations such as KPMG and Deloitte & Touché, LLP, where I have delivered internal and external audit engagements focused on technology and information security processes in the pharmaceutical, consumer and industrial products (gaming sub-sector), and healthcare industries.At KPMG, I worked as a Consultant (Senior) from April 2022 to April 2023, where I was responsible for conducting risk assessments, identifying control weaknesses, and evaluating control effectiveness. I delivered internal and external audit engagements focused on technology and information security processes from planning through to execution, reporting, and follow-ups. I was involved in the identification of control failures, gaps, and corresponding root causes, and communicated findings, verbally and written, to applicable stakeholders in a helpful manner. I also managed to deliver against deadlines while working on multiple projects and performed risk assessments of IT controls, compliance reports of third-party vendors such as SOC1 type 2 reports.Prior to KPMG, I worked as an Advisor at Deloitte & Touché, LLP, from November 2020 to April 2022. In this role, I independently identified and evaluated complex technological risks, internal controls which mitigate risks, and related opportunities for internal control improvement. I conducted walkthroughs to understand the client’s IT Environment, Policies and Procedures, Application/Network/Database, control process, and performed assessments of SOC1 Type 2/SSAE18 for evaluating the operating effectiveness of third-party vendor’s controls. I also performed IT General Controls (Test of Design (TOD) and Test of Operating Effectiveness (TOE)) reviews in compliance with SOX-404 standards and COBIT framework. I analyzed internal controls of access provisioning and de-provisioning, information security, and backups across IT platform including operating system, database, and network components. I performed and assisted with the documentation of the processes around risk management, segregation of duties & workplace security, and drafted Interfaces process data flows/ IT System diagrams using Visio tool. I also reviewed audit’s work of IT security and General Controls testing for Gaming Clients and tested ICS to MICS compliance procedures and gaming compliance procedures for multiple casino clients across different legal jurisdictions.

Experience

1. Manager

   Deloitte

   May 2025 — Present · IN

Education

• Institute of Public Enterprise

  Master of Business Administration - MBA, Marketing/Marketing Management, General

  2018 — 2020

• West Bengal University of Technology, Kolkata

  B-tech, Electronics and Communications Engineering