
Sushen Verma
@sushenverma
IT auditor at EY delivering SOC 1 and SOC 2 examinations across 10+ industries.
What I'm looking for
At Ernst & Young (EY), I deliver SOC 1 and SOC 2 examinations for service organizations across more than 10 industries. I review control mappings and system descriptions, and assess CUECs and CSOCs.
I test ITGC and ITAC, including logical access, change management, IT operations, and SAP application controls. I also validate audit evidence, follow up on control gaps, and document control exceptions and test results.
At Mini Garg & Associates, I led financial, tax, and internal audits for banking, telecom, and retail clients. I’m a Chartered Accountant, have passed the CISA examination, hold the CSOE certification, and am pursuing an M.Sc. in Information Security.
Experience
Work history, roles, and key accomplishments
Delivered SOC 1 and SOC 2 examinations across multiple industries, coordinated junior team members, and performed ITGC and ITAC testing.
Performed IT audit procedures including SOC examinations, ITGC testing, and control testing for financial reporting.
Audit Assistant
Mini Garg & Associates
Jan 2021 - Aug 2024 (3 years 7 months)
Led financial, tax, and internal audits for banking, telecom, and retail clients, including testing IT controls and core processes.
Article Assistant
Mini Garg & Associates
Feb 2017 - Feb 2020 (3 years)
Assisted in audit engagements, gaining experience in financial and IT audit procedures.
Education
Degrees, certifications, and relevant coursework
Indira Gandhi National Open University
M.Sc., Information Security
Pursuing M.Sc. in Information Security from IGNOU, expected completion in December 2026.
Udemy
PCI DSS Bootcamp, PCI DSS
Completed PCI DSS Bootcamp by SecuritasX IT Training on Udemy in September 2026.
Udemy
AI Risk Management: NIST AI RMF and ISO 42001, AI Risk Management
Completed AI Risk Management: NIST AI RMF and ISO 42001 course on Udemy in October 2026.
ISACA
CISA Examination Passed, Information Systems Auditing
Passed the Certified Information Systems Auditor (CISA) examination in January 2026.
Sarbanes-Oxley Compliance Professionals Association
Certified Sarbanes-Oxley Expert (CSOE), Sarbanes-Oxley Compliance
Certified Sarbanes-Oxley Expert (CSOE) from the Sarbanes-Oxley Compliance Professionals Association, completed in August 2024.
Kennesaw State University
Cybersecurity Foundations for Risk Management, Cybersecurity
Completed Cybersecurity Foundations for Risk Management course on Coursera in July 2024.
Indira Gandhi National Open University
Post Graduate Certificate in Cyber Law (PGCCL), Cyber Law
Post Graduate Certificate in Cyber Law (PGCCL) from IGNOU, completed in December 2022.
Indira Gandhi National Open University
Master of Commerce, International Business Operations
Master of Commerce in International Business Operations from IGNOU, completed in December 2022.
Institute of Company Secretaries of India
Company Secretary (Final), Corporate Law
Company Secretary Final from the Institute of Company Secretaries of India, completed in December 2019.
Institute of Chartered Accountants of India
Chartered Accountant, Accounting
Chartered Accountant qualification from the Institute of Chartered Accountants of India, completed in May 2024.
Indian Law Institute
Certificate Course in Cyber Laws, Cyber Laws
Certificate Course in Cyber Laws from the Indian Law Institute, completed in November 2020.
Jiwaji University
Bachelor of Commerce, Commerce
Bachelor of Commerce from Jiwaji University, completed in June 2018.
Availability
Location
Authorized to work in
Salary expectations
Social media
Job categories
Skills
Interested in hiring Sushen?
You can contact Sushen and 90k+ other talented remote workers on Himalayas.
Message SushenGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
