Abhilash Boorugu

• Planned and managed the ITGC audit functions using best practice audit guidelines in compliance with COSO and COBIT standards
• Conducted walkthrough, formulated test plans, documented gaps, tested the results and exceptions.
• Performed assessment of IT internal controls as part of the compliance and operational audits.
• Identified and communicated audit findings to senior management and client.
• Implemented process improvements to SOX testing, resulting in efficiency in review time and desirable financial reporting.
• Performed all stages of the audit including, planning preparing the audit program, fieldwork executing, reporting and follow up.
• Met with plan owners and company client to remediate audit findings/exceptions and as follow up to ensure system security.
• Performed assessments of application controls and IT general controls such as access control, change management, operations, disaster recovery and job scheduling.
• Supported the development, implementation, and monitoring of data confidentiality, system integrity, system reliability, recovery methods and procedures.

Worked on IT Audit Role

• Performed in Identifying IT controls, assessing their design and operational effectiveness, determining risk exposures and developing remediation plans.
• Attended walkthrough meetings to assist with identifying and testing of key IT dependent SOX controls and IT General Controls (ITGCs)
• Performed evidence gathering for control testing and identifying populations of control evidence further, selecting samples for control testing and documenting test results.
• Assisted clients in the identification and management of information security risks by assessing the current state, prioritizing improvements, and conducting external management review meetings to reduce risk and improve regulatory compliance.
• Orchestrated in summarizing Audit objectives, scope, findings, conclusions, and management response and ensuring the audit summary is prepared within established deadline.

• Worked in conducting Internal Audit aligning to ISO27001:2013 standard, also performed site assessments, system audits on all controls including client information access data. Also, assisted in follow-up on Remediation’s for Business continuity.
• Performed in ensuring compliance with ISO 27001: 2013 standard by performing monthly Access Management on logical access and physical access.
• Worked on DLP tool to monitor the sensitive data and Conducted induction programs special awareness drive on information security.
• Performed in verifying 3rd party service provider controls such as Employees Background verification compliance.
• Performed in validating service agreements and AMC of Fire Extinguisher, also conducted Physical audit of water detection system & rodent control system in critical areas such as server, network room.