Sandeep Naik

About Sandeep Naik

I am an IT Auditor professional with 3+ Years of experience in Governance, Risk & Compliance (GRC), information security audits, risk management, and ITGC SOX audits. I am committed to supporting organizations in achieving their information security goals and enhancing business growth.My expertise includes planning and conducting audits focused on risk assessment, process controls, and regulatory compliance, with a solid understanding of Sarbanes-Oxley (SOX) requirements and technical IT controls.I have hands-on experience with ITGC controls related to logical access, change management, and operations, along with documenting and communicating control testing results for internal audits and SOX assessments.Skilled in role management, I have worked with single, composite, and derived roles and have exposure to frameworks such as EAM, ARA, BRM, and ARM.I hold a Batchelor\'s degree in Electronics and Communication Engineering (2022) and continuously strive to grow and contribute meaningfully to the field.

Experience

1. Itgc

   KPMG

   May 2022 — Present · Hyderabad, IN

   At KPMG, I was responsible for IT audit and SOX 404 internal controls testing, including IT general controls (GITCs), segregation of duties, automated controls, and SAP-specific controls. I collected data, performed tests of design and effectiveness (TOD & TOE), and supported control owners in addressing gaps.I conducted ITGC and SAP application control testing related to logical access and change management across multiple business units, ensuring compliance with global financial control standards. I collaborated with SAP implementation and security teams to manage user access and resolve segregation of duties conflicts.Additionally, I advised clients on project delivery, regulatory issues, and control improvements. I developed work programs and assessments to evaluate controls and security practices.I worked closely with clients to understand their needs, deliver audit projects, and maintain strong relationships. My responsibilities also included testing user access, physical and logical security, backup and restoration processes, and leading the design and continuous monitoring of IT controls to ensure audit objectives were met.

Education

• Velagapudi Ramakrishna Siddhartha Engineering College

  Electronics and Communications Engineering

  2022