Sai kiran User

I’m an IT Compliance Analyst with 3.5+ years of experience across SOX 404, SOC 2, and ISO 27001 audits, focused on ITGC and ITAC testing and enterprise risk management within ITSM frameworks. I translate control requirements into clear testing and reporting so stakeholders can move from findings to closure confidently.

I specialize in end-to-end control testing, including Change Management (CAB reviews), Incident Management, and Problem Management processes through ServiceNow GRC and ITSM. I also lead Third-Party Risk Management (TPRM), review SOC reports, and map controls to NIST, GDPR, COSO, and COBIT to ensure compliance coverage is audit-ready.

In practice, I own quarterly User Access Reviews, identify and remediate Segregation of Duties (SoD) conflicts, and reduce audit query turnaround through proactive evidence preparation and automation. I maintain risk registers in ServiceNow GRC, track remediation progress to closure, and develop Risk and Control Matrices (RCMs) that connect control design to financial reporting risks.