Shivani Negi

WORK HISTORY

EDUCATION

ABOUT SHIVANI NEGI

IT Risk, Audit, and Compliance professional with experience across technology, cyber, and financial audit domains in consulting as well as in-house internal and external audit environments.Currently working as an Assistant Manager at Grant Thornton, supporting client engagements related to IT audits, IT General Controls (ITGC), cyber maturity assessments, gap assessments, and risk management requirements. Responsibilities include conducting control walkthroughs, performing risk and control self-assessments (RCSA), drafting risks and controls, testing control design and operating effectiveness and supporting audit reporting. Experienced in auditing key cybersecurity domains such as identity and access management, data privacy, business continuity and disaster recovery, change management, etc. with proficient knowledge of global standards and regulatory requirements including ISO/IEC 27001, SOC 2, GDPR, SOX, and ENS.Previously associated with American Express in an in-house internal audit environment, with exposure to enterprise-level internal control frameworks related to vendor risk management and payment processes.