● Audit internal controls over financial reporting (ICOFR) for management assessment under Section 404 of the Sarbanes-Oxley Act ("SOX"); includes meeting with various departments to understand key business and IT processes, testing of key automated and IT general controls (ITGC), and making recommendations for improvements in internal controls. ● Identity and access management (IAM) covers the policies, processes, and tools for ensuring users have appropriate access to information technology (IT) resources. Identifying and evaluating the risks during review and analysis of system development life cycle (SDLC), including Design, Testing/QA, and Implementation of systems and upgrades. Evaluating controls including Change Management, Access Controls, Segregation of Duties, System development methodologies, Incident management controls regarding SDLC. ● Work with the Internal Audit team Managers and the Director to address any observed concerns or gaps, provide recommendations, and monitor the resolution of prior period issues. ● Performed compliance, operational, IT and financial internal audits to determine adherence to guidelines and regulations and evaluate the effectiveness of internal controls. ● Reassessing the controls and deficiencies and retesting all the identified key controls within SOX guidelines. ● Evaluating IT control elements to reduce IT risks related to the confidentiality, integrity, and availability of business information. ● Reviewing and testing for segregation of duties (SOD) and accessing control in application to ensure compliance with SOX. ● Risk control metrics (RCM) listing for tool optimization and automation to reduce manual work. ● Conducted walkthrough, formulated test plans, documented gaps, tested the results and exceptions. ● Create precise, logical, and detailed work documents that clearly describe the control, testing results, and conclusions made. ● Sending the WSR (weekly status report) to the management which includes all the control findings. ● Delivering timely and concise communication, including developing and producing management reports, illustrating status, trends, and action plans.

● Performing general controls review to verify compliance with SOX section 404. ● Reviewing the systems for IT general controls (ITGC), risk and compliance with policies and regulations. Reviewed SDLC, designed, and implementation of process and automated controls, data created final audit reports and oversaw the implementation of creative action plans while maintaining communication with all levels of management. ● Performed assessments of application controls and IT general controls such as access control, change management, operations, disaster recovery and job scheduling related to SOX-404 (GITCs). ● Auditing the controls with 4 guidelines/GITC pillars-Risk, Control, Vulnerability, Threat with policies and regulations. ● Defines, executes and manages IT audits to assist in completion of the annual audit plan. ● Individual workpapers and documentation of work accomplished are completed on time and arranged so that conclusions and findings are fully supported. ● Tracking the results of prior audits and facilitating appropriate corrective action. ● Responsible for the management and delivery of IT and business process audits to ensure that business risks are identified and addressed appropriately before they have a negative impact on the organization.

● Assist/lead various compliance efforts and ensure adherence to stated policies and procedures such as SOX 404. ● Assist in the development of all audit processes, including risk assessment, planning, audit program development, audit procedure execution, and audit results reporting to higher management. ● Testing, Implementing and Identification of risks by testing the controls (ITGC). ● Performed Access management (IAM), Change management, Incident management, IT operation (ITOM). ● Worked on Access reviews for Highly privileged user accounts (HPA) and Non-highly privileged user accounts (non-HPA) for both applications and databases. ● Worked on Quarterly HPA, User creations, User Terminations, Password configurations. ● Manage remediation of unidentified/unauthorized access deficiencies, mitigate risks with the help of application teams. ● Evaluating IT controls, analyzing and assessing IT controls, risk management, security, and compliance, as well as the complete IT audit process. ● Attending Walkthroughs and Reviewing work papers and reports, documenting and analyzing the audit evidence. ● Knowledgeable in ERP (SAP) business processes and testing of relevant controls.

● Independent execution of various internal Audit assignments by supervision of operations including planning, resource allocation and overall quality of deliverables, processes, and completion of Audits. ● Vouching & Verification of Account balances & Assets and Liabilities. ● Conducting physical verification of stocks, inventory & Fixed Assets. ● Filing of TDS & Income Tax returns. ● Internal Audit of Financial Statements.