Mahesh Jumnani

I’m a dual-qualified CA (ICAI) and CPA (Australia) and an IT audit specialist with 3+ years of Big 4 experience across KPMG and BDO, including a direct secondment with KPMG Australia. I focus on strengthening governance through practical testing of IT General Controls (ITGC) and IT Application Controls (ITAC), so controls work where it matters—inside real business processes.

In my recent engagements, I’ve performed ITGC and ITAC fieldwork (including logical access and change management testing) and supported ERP control reviews across complex environments. I’ve also led and executed SOC 2 Type II work—from walkthroughs and control testing to drafting system descriptions and control objectives—following AICPA-aligned expectations.

What I bring beyond compliance is hands-on exposure to financial reporting linkages, including SOX IT controls testing and ERP control walkthroughs (including SAP ITGC/SOD analysis). I analyze process design and operating effectiveness, identify control design weaknesses and inefficiencies, and produce risk-rated findings that management can act on quickly.

I’ve worked across banking, aviation, technology, and global clients, advising on deficiency assessment and remediation, and using clear workpaper documentation to support audit readiness. My approach is consistent: understand the process, test intelligently, and communicate findings in a way that improves operational efficiency and strengthens compliance posture.