Seeking a remote or Hyderabad-based Senior Manager, AD or Head of IT Audit / GRC role. CISA with 12+ years in SOX 404, ITGCs, SAP GRC, SOC 1/2 and cyber audit (NIST CSF, ISO 27001, PCI DSS); currently leading an AI governance audit against the NIST AI RMF. Want to own the audit or compliance program, grow it into cloud and AI, and report to senior leadership. Open to US/EU overlap hours.
Looking for a job
Sravanthi Reddy Nalla
@sravanthireddynalla
IT Audit Manager at Fossil Group, Inc. delivering risk-based IT and cybersecurity audits.
IndiaWhat I'm looking for
At Fossil Group, Inc., I lead the full audit lifecycle for IT and cybersecurity audits and deliver the annual risk-based IT audit plan.
I’ve designed internal audit processes for continuous monitoring using data analytics, and developed audit methodologies for emerging areas including Cloud, Agile development, E-Commerce, Social Media, and ESG.
At ITC Infotech, I implemented SOX controls across in-scope systems and ran control self-assessments in SAP GRC, testing ITGC design and operating effectiveness.
Earlier, at Zestwings, I tested and documented SAP application ITGCs. At Tech Mahindra, I supported SAP security through user administration and authorization troubleshooting.
Experience
Work history, roles, and key accomplishments
Current
▪ IT & Cybersecurity Risk Assessment — Performed recurring IT and cybersecurity risk assessments to identify key risk areas and ensure coverage within the annual IT audit plan.
▪ Audit Process Design & Automation — Designed and implemented internal audit processes for continuous monitoring of IT and cybersecurity risks using data analytics.
▪ Emerging Risk Auditing — Developed and execute
▪ SOX Controls Implementation: Implemented key SOX controls across in-scope systems — designed, embedded, and driven through to sign-off.
▪ Client Communication: Owned day-to-day client contact — progress, findings, and issues raised early, never buried until the report.
▪ Control Self-Assessments: Ran control self-assessments in SAP GRC, testing ITGC controls for both design and operatin
▪ Control Testing & Documentation: Reviewed control processes with control owners, executed tests, and documented results for ITGC controls in SAP applications.
▪ TOD & TOE: Conducted Test of Design (TOD) and Test of Effectiveness (TOE) for ITGC controls related to Change Management, Logical Access, and Operations Management.
- User Administration
- Analysis of authorization issues and suggestion of SOD compliant user roles.
- Handled missing Authorizations. Troubleshoot authorization errors to resolve security conflicts using trace. Day to day technical support and resolution of Security issues.
- Worked on Google calendar app on different platforms.
- Automating the daily builds and adding new frameworks for the features. ● Closely worked with IOS app launch and Android app launch.
- Working on release evaluation service.
- Requirements study and analysis.
- Involved in Testing Major Modules from Admin, Bank Master, Nodal Branch Master, Carrier Master, User Master, ATM Master & Nodal Mapping.
Education
Degrees, certifications, and relevant coursework
UC
University of Missouri-Kansas City
Masters
Tech stack
Software and tools used professionally
Availability
Looking for a job
Location
IndiaAuthorized to work in
Salary expectations
325k+ INR
Social media
Interested in hiring Sravanthi Reddy?
You can contact Sravanthi Reddy and 90k+ other talented remote workers on Himalayas.
Message Sravanthi ReddyGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
