Utsav Shah

About Utsav Shah

With over seven years of experience in IT compliance and auditing, I currently serve as a Manager at EY, specializing in ISO standards and SOX frameworks. Passionate about enhancing organizational resilience and regulatory alignment, I bring a mission-focused approach to strengthening security frameworks for global organizations. My expertise ensures that compliance processes not only meet but anticipate regulatory demands, contributing to a culture of preparedness and innovation. At EY, I lead teams conducting complex audits, including ISO 27001:2013 and SOX compliance for global financial institutions and payment providers. Through collaboration and stakeholder engagement, we assess control adequacy, identify gaps, and provide actionable remediation strategies. My work consistently enables organizations to fortify their IT landscapes while aligning with regulatory standards.

Experience

1. Manager

   EY

   Feb 2022 — Present

   ISO 27001:2013 Internal Audit Mandate for Global Payments Network Processor:Conducted an ISO 27001:2013 internal audit for a global payment company, focusing on compliance with clause 9.2. Leading a team, we assessed product alignment, verified organizational responses, engaged with stakeholders, tested control sufficiency, and presented findings with remediation plans at the Information Security Steering Committee meeting.SOX (Sarbanes Oxley Act) Audit for Global Investment banki. In compliance with Sarbanes-Oxley Act (SOX), we\'ve defined our compliance scope for a targeted approach.ii. Following the established SOX framework, we defined controls during a comprehensive IT landscape walkthrough, strengthening our controls In a leadership role, collaborated with the Controls team to define Controls, Testing Approach, and Strategy, ensuring transparency and accountability.iv. Leading a team of 15, conducted rigorous Tests of Design and Operating Effectiveness, providing comprehensive insights for regulatory compliance and reinforcing our commitmentBasel Committee Banking Supervision (BCBS) 239 Requirement for Global Investment Bank:i. In line with Basel Committee Banking Supervision (BCBS) 239, identified Risk Flows in our reporting, ensuring transparent and accountable risk data reporting.ii. Collaborating with the Chief Data Officer\'s team, established a strong data governance framework through extensive Data Lineage, ensuring accurate and reliable data by tracing its origins and To adhere to BCBS 239 standards, identified correct Source and Target combinations, ensuring data accuracy and integrity as it moves through systems and processes.iv. Leading a team of 10, spearheaded testing efforts to ensure Design and Operating Effectiveness of Controls, enhancing the integrity and reliability of risk reporting by ensuring data completeness.

Education

• Nirma University

  Master of Technology (M.Tech.), Computer Science

  2015 — 2017

• Gujarat Technological University (GTU)

  Bachelor's degree, electronics and communication

  2011 — 2015