Supriyo Saha

About Supriyo Saha

I am a Bachelors degree holder for Engineering in IT and have completed MBA-ITBM (Specialization in Information Security & System) at Symbiosis Centre for Information Technology, Symbiosis International University, Pune.Audit Experience :o Knowledge of Internal Audit procedures including planning, understanding and mapping the “as in” process, identifying controls and risks (Risk Control Matrix) and performing sample testing.o Perform SOC1 testing and SOC2 testing and reporting work.o Knowledge of Third Party (Vendor) Assessment procedures.o Sound knowledge about information security frameworks such as ISO 27001, ITIL and PCI DSS.o Knowledge in Transformation Project from Legacy system to digitization.Sarbanes Oxley Compliance (SOX) Experience :o Knowledge in assessment and testing of internal controls, which includes both, Business and IT General Controls under Sarbanes-Oxley Section 404.Third Party Risk Assessment :o Performed Risk Assessment of vendors for major investment banks & Global Financial Services. firms on various domains. The tasks involved managing & co-ordinating with clients and the suppliers/service providers for performing quality assessments on vendor reviews, status reports, budget monitoring and ensuring deliverables were completed on time. SAP GRC Access Control Experience :o Knowledge & experience in performing access controls reviews related to sensitive access and segregation of duties.o Knowledge of GRC, SOD Analysis and conflict resolution.My career objective is to \"Aim at leveraging my technical and functional skills, consultative in the Information Technology department that offers professional growth while being resourceful, innovative and flexible.\"My area of interest are IT Risk Management & Audit, Information Security Management & Consulting, Enterprise Risk Management, IT advisory, Business Strategy & planning.

Experience

1. Fso Technology Risk Senior Manager

   EY

   Aug 2025 — Present · Charlotte, NC, US

Education

• University of Calcutta

  Bachelor's Degree, Information Technology

  2006 — 2009

• Symbiosis center for Information Technology

  Master's Degree, Information Technology

  2012 — 2014

• University of Calcutta

  Bachelor's Degree, Computer Science (Hons.)

  2003 — 2006

Skills

• Iso 27001
• Risk Assessment
• IT Audit
• Itil
• Project Management
• Information Security
• Pci Dss
• Enterprise Risk Management
• Sarbanes-Oxley Act
• Vulnerability Assessment
• Sap Grc Access Control
• Consulting