Looking for a job

Mangirish Nadkarni

@mangirishnadkarni

IT Audit leader at EY who built SOX-ready IT control environments for two post-IPO companies.

At Ernst & Young US LLP, I lead risk-based IT audit engagements and helped two post-IPO companies build IT control environments for SOX compliance. I’ve also strengthened audit quality on three Fortune 100 audits and led teams through three clean PCAOB inspections.

At Rogers Communications, I owned the IT SOX testing workstream, reducing external auditors’ testing hours by 25%, and partnered with business leaders to reduce overdue remediation items by at least 50%. Earlier, at Grant Thornton Canada, I directed SOC 1/SOC 2 engagements and advised clients on technology risk and control improvements.

Experience

Work history, roles, and key accomplishments

Current

Senior Manager – Technology Risk (IT Audits)

Current

Ernst & Young US LLP

Jan 2023 - Present (3 years 9 months)

Led multiple risk-based IT audit engagements exceeding 20,000 budgeted hours, strengthened audit quality on three Fortune 100 audits, and built SOX-ready IT control environments for two post-IPO companies. Delivered quarterly Audit Committee presentations and led teams through three clean PCAOB inspections.

IT Audit SOX 404 ITGC ITAC Risk Based Audit Audit Committee Reporting PCAOB Remediation Advisory Team Leadership COSO COBIT2019 NIST CSF ISO 27001 SAP Oracle AWS Okta Workday Salesforce AuditBoard Snowflake

Senior Manager – IT Risk Advisory

Grant Thornton Canada

Sep 2021 - Dec 2022 (1 year 3 months)

Directed approximately 15 annual SOC 1/SOC 2 engagements as the primary IT Audit Senior Manager for the Southern Ontario Business Unit, generating over $400K CAD in new revenue. Designed risk-based IT audit plans and evaluated control deficiencies for severity, communicating recommendations to client management and Audit Committees.

SOC 1 SOC2 IT Audit Risk Assessment Deficiency Evaluation Audit Committee Reporting Business Development Proposal Writing Scoping Pricing IT Risk Cloud Based Risk Management Third Party Risk

Manager – Internal Audit (IT)

Rogers Communications

Aug 2018 - Aug 2021 (3 years)

Led a team of 5-6 internal auditors, improving audit efficiency by 13% in year one and sustaining it thereafter. Owned the IT SOX testing workstream, producing workpapers that external auditors relied on, cutting their testing hours by 25%, and reduced overdue items by at least 50% through streamlined remediation processes.

Internal Audit SOX Testing IT Risk Management Audit Planning Team Leadership Workpaper Review Deficiency Management remediation Process Improvement

Senior Consultant – Technology Risk

Ernst & Young US LLP

Jun 2013 - Jul 2018 (5 years 1 month)

Led IT audit teams for clients across Energy, Technology, and Finance industries, performing risk assessments and building risk-based audit plans. Served as subject-matter expert on compliance engagements including SOX 404, NIST 800-53, and NERC-CIP, and trained engagement teams on SOX ITGC controls testing.