Sakthiswaran R Mobile: +91 90499 94873 E-mail: sakthishwaran@yahoo.co.in Website: http://www.sakthiswaran.com Summary of Experience & Expertise Over 3+ Years of experience in external Information Systems audits, IT general control reviews, SAS70 and SOX engagements and over 12 months of experience in Web development. Performed IT General Control reviews for external audit clients, SAS70 reviews and offshore controls review for technical platforms like SAP & OS400. Strong command on Information Security, excellent exposure on IT risk assessment, audit and IT Governance framework like CobiT. Plan, schedule and monitor technical system infrastructure and business application reviews. Possess thorough knowledge of various SAP R/3 configurations including review of user profiles and authorizations, configuration of user access, controls relating to SoD. Possess thorough knowledge in development life cycle process such as SDLC and quality process such as CMMI and will be able to perform Business application life cycle review and code reviews. Possess thorough knowledge in working and auditing database controls relating to access and auditing in databases such as Oracle, SQL Server, DB2 and MySQL. Possess good knowledge in Networking and will be able to review network devices like routers, switches and firewalls. Maintain effective working relationships at all levels of management in client organizations Sound knowledge of audit best practices and ability to train other team members in these practices and improve team audit skills Career Objectives & Possible Roles Committed team player with strong analytical and problem solving skills, setting high goals of performance for self and the team, strive for distinction in all tasks and Go beyond the minimum expectations. Willing to enhance my career in IS Audit / Consulting, Willing to relocate/travel and ability to quickly adapt to new environments. 1 of 5
Technical Skills ERP: SAP Basis, Oracle Apps, JD Edwards and PeopleSoft. Database: DB2, MySQL, Oracle, SQL Server and MS Access. Database Analysis Tools: ACL 9, Toad, MySQL, Oracle and DB2. Platform: MS DOS, Linux, OS400, UNIX and Windows Web servers: Apache & IIS. Certifications: Other Trainings: Certified Information Systems Auditor (CISA) Web CEO Certified Competent Search Engine Marketer ( CSEM ) Cisco Certified Network Associate ( CCNA ) Computer Forensics (Brainbench Certified) Project Management (2005 - Brainbench Certified) Diploma in E-Commerce (DEC) ITIL v3 Sarbanes Oxley Business Process Fundamentals SAS 70 SAP Qualification: Degree Institution Year attained Percentage MBA (Technology Management) Anna University 2009 61 % B.E (Computer Science) Hindustan college of Engineering 2005 72 % Honors Diploma in Computer technology Bharath Polytechnic college 2002 94.3% 2 of 5
Professional Experience Employer Positions From To IBM Security Compliance Executive January 2009 Till date Deloitte Touché & Tohmatsu Deputy Manager Sep 2008 January 2009 PriceWaterhouseCoopers Associate May 2006 Aug 2008 Sify Limited Engineer Trainee Jan 2005 May 2006 Job Profile (IBM) Played a lead role for the entire account and responsible for compliance activities which includes, 1. Prepare the compliance review plan 2. Perform / Manage SAS70 compliance review for the account 3. Train team members and process owners on SAS70 audits / controls 4. Update the management on the compliance to controls on a periodic basis 5. Work with PwC on defining SAS70 controls and support them during audits Primary Account: Vodafone Other Account supported: Tata Motors Job Profile (Deloitte) Played a manager role and responsible for planning and conducting Multi location SAS70s which includes: Preparation of engagement letter, engagement plan & budgets. Planning, deploying and managing resources on the ground Updating client management on the status Preparation of the SAS70 report. Major Client: Cognizant Technology Solutions, Vedanta group (Sterlite) Industry Verticals: Banking & Life Sciences Type of engagements: SAS70 Type II, SOX and GCC 3 of 5
Job Profile (PriceWaterhouseCoopers) Played an associate role and involved in scoping, performing review of IT controls, documenting the results, communicating the results to the management and followup on the action plan. Industry Verticals: Information Technology (IT) IT enabled Services (ITES) Telecom Automobile Healthcare Manufacturing Fast Moving Consumer Goods (FMCG) Major Client Includes: IBM, Dell, Capgemini, Shell, Toyota Motors, Robert Bosch, Bharti Airtel, Misys Healthcare, Nike, Britannia, Volvo and AXA. The types of engagements includes the following IT General Control reviews for the audit clients SAS70 engagements SOX assignments / Offshore Controls review Shared Services review Data analysis assignments using CAAT tools. Job Profile (Sify) Played a developer role and responsible for planning, development, peer reviews and testing of internal web applications. Also responsible for administrating a web application server for data centre temperature monitoring. Project: Mail Provisioning System Team Size: 5 Scope: Mail Provisioning system is a complete web based mail system with super administrator and administrator interfaces. This system enables to define domains and create mailboxes for the users in the domain. It is build to support distributed platforms. Responsibility: Responsible in coding for administrator, super administrator module, EOD Scripts and report generation. Responsible in preparing project documents such as SRS, FDS and Test cases. Project: Audit Automation Team Size: 2 4 of 5
Scope: Audit Automation system is a complete web based auditing system makes auditing process as an automated process. This auditing system enables to conduct audits, finding non conformance, taking corrective actions and closure of audit. Responsibility: Responsible in coding for audit planning and action and execution part. Responsible for database design, creation and preparing project documents such as SRS, FDS, Test cases and RTM. Project:.in registry Team Size: 3 Scope:.in Registry is a site for booking domains and making who is lookup. This also allows changing A-Record, MX Record and DNS Addresses for the domain. Responsibility: Responsible in coding for Business admin module, implemented column level sorting. Project: Temperature Monitoring and control for Datacenter Team Size: 2 Scope: This project gets temperature in datacenter and makes reports, prepares graphs for the Administrator. The reports can also be taken as weekly, monthly, yearly and date selection reports with graphs for temperature and humidity values. Responsibility: Responsible for database design, creation and coding for the reports, generating graphs. Personal Profile Name : Sakthiswaran Father s Name : Rengaraju Date of Birth : 10-03-1985 Nationality : Indian Gender : Male Passport No : E8560093 Permanent Address : No.1, 2 nd Street, Duraisamy Nagar, Kilkattalai Chennai 600 117, India. Achievements Awarded for designing the website for a social service organization called Ignite (ignite.org.in) Organized the event debugging in technical symposium Eluminate 4 (Feb 2004). College first rank holder during polytechnic (May 2002). 5 of 5