Aniket Walia

Led audits of AI Governance, 52-109 Financial Certification ITGC testing, SDLC, Business Continuity Planning, and Disaster Recovery exercises by developing audit plans, conducting detailed walkthroughs, evaluating risk exposures, and performing control testing. Delivered insightful audit reports with recommendations to enhance regulatory compliance and improve organizational resilience. Drove issue tracking and remediation efforts by partnering with cross-functional stakeholders to define actionable plans, monitor progress, and report status updates to the Audit Committee, enhancing transparency and accountability in risk remediation. Developed AI-powered control testing templates aligned with IIA standards to automate audit workpapers, improving documentation consistency, reducing manual effort, and increasing overall audit efficiency.

Designed and developed a scalable cyber metric library for first- and second-line technology reporting, aligning metrics with OSFI B-13 guidelines, and built dashboards to visualize risk indicators for quarterly board and committee meetings. Developed enterprise risk management dashboards consolidating Risk Treatment Plans (RTPs) from IA, ORM, ICFR, and RCSA into a single accessible view. Created a data management solution consolidating policies, risks, RCSA and SOX controls, and KRIs aligned with BCBS 239, enabling pre-formed regulatory response packages. Evaluated insider risks using qualitative and quantitative approaches, delivering maturity scores and actionable recommendations. Led strategic transformation of first-line capabilities across risk reporting, control testing, and tech risk training. Established a third-party risk management program including intake forms, SOPs, and governance structures. Automated project workflows using Python, Power Apps, and VBA.

Led SOX and SOC 2 Type 1 & Type 2 audits for diverse clients across multiple sectors, leveraging expertise in operating systems, databases, firewalls, ERPs, and business processes to ensure regulatory compliance. Managed ITGCs and ITACs in collaboration with senior management to develop detailed audit reports and support risk remediation strategies. Conducted interviews and walkthroughs with key stakeholders to evaluate control design against COBIT, COSO, ISO, and NIST standards and perform control effectiveness testing. Developed detailed audit workpapers documenting findings based on evidence and independent assurance controls, serving as an outsourced IT Internal and External Auditor. Provided recommendations to address identified risks and collaborated on tracking control deficiencies and remediation plans.

Delivered security role and profile builds in SAP ECC, GRC, and EWM systems aligned with business requirements and organizational security standards. Provided hypercare support by proactively troubleshooting critical issues related to access levels, programs, transactions, and authorization granularity, following the organization's change management process. Maintained overall system security configurations and provisioned critical access for high-privilege IDs including firefighter, SAP*, DDIC, and Debug, while enforcing rigorous SOD checks and approval processes prior to granting access.

Executed multiple assurance and advisory engagements under the guidance of senior managers, adhering to quality standards and firm and regulatory methodologies across varied business processes. Conducted walkthroughs with clients to understand their IT environment and analyzed evidence to ensure completeness and accuracy. Documented control testing reports communicating potential deficiencies and exceptions identified during testing, and provided recommendations to mitigate risks in the system.

Contributed to the development of a web application using React, Node.js, and MongoDB, implementing features that improved user experience and reduced bugs. Participated in code reviews and worked with cross-functional teams to design and implement new features, resolving technical issues and improving overall system performance.