Open to opportunities

Vaidehi Patel

@vaidehipatel2

Message

IT Compliance Analyst at Ryerson supporting PCI and CMMC assessments, SOX controls, and user access reviews.

United States

Message

At Ryerson, I support PCI and CMMC assessments and execute SOX controls, validating evidence and coordinating audit requests with application, process, and control owners.

I lead the annual policy review and control-certification process, perform user access reviews including SAP security reviews, and evaluate IT general and application controls. I also conduct monthly self-testing of high-risk controls and support remediation and application onboarding into SOX scope.

Previously, at ULTA Beauty Inc. and Navistar Inc., I performed SOX and ITGC work, including access reviews, control testing, audit evidence coordination, and deficiency remediation. At Sath Technologies Inc., I prepared compliance reporting for NERC and ReliabilityFirst requirements and supported software testing and quality assurance.

Experience

Work history, roles, and key accomplishments

Current

IT Compliance Analyst

Current

Ryerson

Nov 2025 - Present (1 year)

Support PCI and CMMC assessment activities and execute in-scope SOX controls, including evidence validation and deficiency identification. Lead annual policy reviews, user access reviews, and monthly self-testing of high-risk application controls.

SOX ITGC PCI CMMC SAP User Access Reviews Control Testing Policy Reviews Compliance Monitoring

Technical Marketing Specialist

YMPV Inc.

Nov 2023 - Nov 2025 (2 years)

Managed day-to-day IT networking and user access administration for business operations. Supported business promotion and social media marketing initiatives.

IT Networking User Access Administration Social Media Marketing

Senior IT SOX Analyst

ULTA Beauty Inc.

Nov 2021 - Nov 2023 (2 years)

Executed SOX control activities and maintained audit-ready documentation, approvals, and evidence for assigned in-scope applications. Managed auditor requests, administered certifications, and performed user access reviews and monthly self-testing of high-risk controls.

SOX ITGC User Access Reviews SAP Ariba Control Testing Audit Management

Senior IT Risk & Compliance Analyst (SOX)

Navistar Inc.

Nov 2018 - Oct 2021 (2 years 11 months)

Partnered with internal and external auditors on ITGC and IT application control walkthroughs, fieldwork, and detailed testing. Coordinated control populations and documentation for IT Finance applications, and performed semiannual user access reviews using RSA IGL.

SOX ITGC RSA IGL (Aveksa)CyberArk Power BI SQL Oracle Unix Windows Mainframe User Access Reviews

Compliance / Business Analyst

Sath Technologies Inc.

Oct 2014 - Oct 2018 (4 years)

Served as a subject matter expert for core business applications and supported systems administration and application maintenance. Prepared IT compliance reporting and evidence documentation for NERC and ReliabilityFirst requirements, and performed testing and quality assurance activities.

NERC CIP Compliance Reporting Asset Management Change Management Patch Management Vulnerability Data Functional Testing Integration Testing Regression Testing Black Box Testing Agile Waterfall Test Planning Test Cases Test Scripts

Customer Solutions Engineer

Nokia / Microsoft

Jul 2011 - Sep 2014 (3 years 2 months)

Supported deployment of customer configurations, including approximately 600 unique customer webpages for the Xpress Browser team serving 100 million unique users monthly. Managed product rollouts, developed rollout procedures, and tracked issues in JIRA and product versions using AccuRev and Git.

Jira Accurev Git Amazon Redshift PostgreSQL Deployment Project Management Validation

Volunteer Database Administrator

Health Star Communication

Mar 2011 - May 2011 (2 months)

Managed consumer data for a healthcare provider.

Database Administration

Developer

Dharmsinh Desai University

Dec 2007 - May 2008 (5 months)

Developed VB.NET university projects for student information management and employee enrollment systems. Additional development projects included HTML, CSS, JavaScript, Ajax, Java, object-oriented programming, collections, serialization, multithreading, and concurrency.