Sahil Kapoor
Compliance Auditor Analyst @Xerox
Signup · Get unlimited contacts
WORK HISTORY
Compliance Auditor Analyst @Xerox
Gurugram, IN
Performing comprehensive ITGC and SOX control audits across access management,change processes, operational activities, and lifecycle controls to validate adherence to internal governance standards. Evaluating control design and execution effectiveness, ensuring evidence quality and traceability align with audit expectations. Reviewing operational security activities such as vulnerability management coordination and control monitoring to confirm procedural compliance. Preparing structured audit workpapers & maintaining detailed control documentation to support transparency and repeatability. Collaborating with application owners, infrastructure teams, and compliance stakeholders to clarify control intent and strengthen execution discipline. Investigating control deviations, analyzing contributing factors, and coordinating corrective action tracking with responsible teams. Supporting continuous monitoring efforts by validating periodic reviews and operational checkpoints.
EDUCATION
Institute of Management Technology, Ghaziabad
PGDM, Finance, General
Guru Gobind Singh Indraprastha University
Bachelor of Business Administration - BBA, Business/Commerce, General
ABOUT SAHIL KAPOOR
I am a dynamic IT professional specializing in IT General Controls (ITGC) and Sarbanes-Oxley (SOX) compliance audits, with over a decade of experience in IT Service Management, risk management, and compliance within the financial services sector. My expertise lies in evaluating privileged access, change and release management, user entitlement reviews, and operational controls. I have a proven track record of identifying control gaps, strengthening governance frameworks, and guiding remediation efforts that enhance audit readiness and regulatory alignment.Throughout my career, I have developed hands-on expertise in reviewing SOC 1/ SSAE 18/ ISAE 3402 reports and assessing application security practices, including vulnerability management. I am known for translating complex regulatory expectations into actionable control improvements while collaborating closely with cross-functional stakeholders, auditors, and technology teams. My skills in Identity and Access Management (IAM) operations, process optimization, and policy enforcement, combined with my knowledge of GDPR, COPPA, and PCI DSS requirements, enable me to maintain resilient and scalable control environments.Key Achievements- Led the end-to-end execution of SOX and ITGC control testing at Xerox India Limited, strengthening audit defensibility and reducing exposure by proactively identifying and remediating control weaknesses- Directed risk evaluation initiatives that translated regulatory requirements into practical control frameworks, enabling measurable improvements in operational compliance posture- Implemented a Segregation of Duties framework at NatWest Group, closing process gaps and elevating access governance maturity across critical systems.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.