Vyomesh Sharma

At BDO India, I lead internal and external audit activities across financial services, UPI applications, and a major stock exchange, working against RBI, NPCI, SOC 2, and SEBI CSCRF requirements. My audits have produced actionable observations that improve application and organizational security posture.

I've led end-to-end IT audit engagements, from risk-based audit planning through control testing and management reporting. I assess access, change management, logging, backups, and incident response, then translate control gaps into practical remediation recommendations.

Previously at Deloitte USI, I tested application security across 11 applications with HCL AppScan and Burp Suite, investigated critical vulnerabilities and API issues, and collaborated with QA using IBM DataPower to reduce post-deployment defects.

My Information Security master's work combined GRC and cryptography, including a fingerprint-based cryptographic solution for vehicular keyless entry systems. I bring hands-on experience in ISO 27001, technology risk, compliance, SAP access controls, and security policy development.