Tanmay Mane

Experience

1. Risk Consultant

   EY

   Jul 2024 — Present · Mumbai, IN

   Conducted end-to-end information security internal audits across 10+ international locations, ensuring alignment with ISO 27001, NIST CSF, and client-specific frameworks. Performed SOX ITGC audits evaluating access management, change management, and enterprise IT controls, while working closely with client stakeholders to assess control design and effectiveness. Performed gap assessments against industry best practices, recommending improvements to strengthen cybersecurity posture. Facilitated policy and procedure reviews, aligning documentation with applicable controls and supporting remediation efforts. Prepared audit and risk summary reports with key observations, risk ratings, and actionable recommendations. Assisted in information security risk assessments and developed risk registers, supporting risk treatment planning. Successfully managed multiple audit projects across geographies, ensuring timely completion of all phases from initiation to closure.