Ashok Devaraj

Developed and executed the annual audit plan along with maintaining the IT Audit risk register (aligned assurance model with that of IT GRC, InfoSec and Risk Management risk registers) Reported on high-risk audit findings including IT risk trends to C-level staff and to the Audit Committee members Responsible for interfacing with the regulators and the IT Audit budget, setting KPIs and managing a team of four staff members

Leading Technology Audits both locally and globally including defining the scope, planning, managing fieldwork and closing meetings. Managing a team of staff on assigned audits. Developing the annual IT Audit plan. Executing integrated audits. Generate ideas continuous auditing using Data Analytics support.

Conducting risk assessments and managing audits of all aspects of the IT across the organisation in conformance with IIA standards. This includes: Assessing the technical configuration of network switches, storage area network, virtual platforms and SWIFT; reviewing of changes to user and device profile admissions, routing rule management, and following up on management action plans.

Performed IT-Audits, security reviews and IT consulting (software selection, implementation and due diligence) work for various clients: Performed the internal control assurance work for Commercial Bank of Kuwait, Kuwait Real Estate Bank and Al Ahli bank, and reported on the general computer controls to the regulator, Central Bank of Kuwait

Primarily involved in assessing the nature and adequacy of client’s computer control environments and performing application controls and security reviews in the Gulf region: Performed application controls, internal controls review and special engagements for various clients such as leading banks, FMCG, insurance and retail in Kuwait, Kingdom of Saudi Arabia and United Arab Emirates

Specialization in Data Privacy