Ketan Gupta

CEO

Bengaluru, Karnataka, India18 yrs 9 mos experience
Highly StableAI Enabled

Key Highlights

  • CISA-certified with 13 years of IT risk management expertise.
  • Proven track record in integrated audits and risk assessments.
  • Expert in COBIT framework implementation and control automation.
Stackforce AI infers this person is a Risk Management and Compliance expert in the Fintech industry.

Contact

Skills

Core Skills

Cybersecurity ControlRisk ManagementIt AuditControl AutomationRisk AssessmentItgcSox Compliance

Other Skills

AI security & GovernanceAgile MethodologiesAnalytical SkillsAuditingAutomationCISACOBIT 2019 ImplementationCompliance AuditingExcellent Communication SkillsGeneral computing controlIT ControlsInformation TechnologyIntegrated IT AuditInternal ControlsOracle

About

Risk & Controls Management Leader | CISA Certified Specialized in IT Risk Management, IT Audits, SOX Compliance, Internal Controls, IT General Controls (ITGC) with 13 years of focused expertise CISA-certified professional with additional credentials as expert in implementing COBIT framework, improving process by performing the control automation. Proven track record in integrated audits and comprehensive risk assessments Transform complex compliance requirements into strategic business advantages Combine technical expertise with business acumen to protect assets while enabling growth Beyond the Professional: Fitness enthusiast who believes physical discipline mirrors professional rigor. Appreciator of classic melodies and rock music. Passionate movie buff who brings creative perspectives to analytical challenges. Ready to elevate your organization's risk management strategy? Let's connect.

Experience

Protiviti india member firm

Senior Manager Information Security

Nov 2025Present · 4 mos · Greater Bengaluru Area · Hybrid

Cybersecurity controlTeam LeadershipStakeholder ManagementRisk AssessmentRisk ManagementGeneral computing control+1

Anz

2 roles

Manager Technology Control Testing

Promoted

Dec 2021Sep 2025 · 3 yrs 9 mos · Hybrid

  • Responsible for building world class team and capability in different domains across finance, HR, Operations, by identifying the areas of improvements, empowering the team members, leveraging their career, building skills and imparting the knowledge to grow the team.
  • Performed the Quality peer review for ITGC Control testing which include the Privileged User Management, Password Authentication, Unauthorized Software Prevention, Regulatory Compliance security alert notifications, Third Party Risk Management controls, understanding and validating the assessor’s control assessment as per control standard requirement, ensuring compliance with APRA regulation.
  • Control Automation Readiness - Worked as Project Manager with the ANZ Control Automation team to automate the manual controls end-to-end. Perform the quality check for the controls like Change Management, Problem Management, Incident Management, Disaster Recovery Plan which have been manually assessed, validated and evaluated the discrepancies sorted out before deploying into the production for control automation.
  • ANZ Delivery Framework Analyst – Conduct Assessments for go-live releases for the security delivery controls like Functional Requirements, Test Plan, Test Outcome, Architecture Impact Assessment, Solution Design, Security Assessment, Backup requirement. Since this involves critical production deployment, SLA was followed to adhere the timelines.
  • Drove the CTS recruitment by hiring the right people with right talent and skills both internal and external. I helped build the team which grew from 6 to 30 team members who supported in major deliverables like TCL-ITGC mapping, Control Testing Automation logic and Control Testing Assessment
IT AuditITGCControl automationStakeholder ManagementSecurities RegulationCompliance Auditing+3

Control Risk & Reporting Expert

Apr 2019Dec 2021 · 2 yrs 8 mos · Hybrid

  • Primarily responsible to perform the ITGC Control testing (FRG & Non-FRG) for areas which include Identity & Access Management, Change Configuration Audit, Information Security Non-Compliance Checking, Security Penetration testing, Backup controls etc, for ANZ Group Technology to comply with CPS-234 mandatory regulation issued by the Australian Prudential Regulatory Authority (APRA).
  • Streamlined the Control testing environment in 2020 by validating the ITGC Control Library against the latest COBIT 2019 framework.
  • Successfully lead the CTS Non-BAU activities in 2021 with initiatives like GCC Control testing QA review conducted for Indonesia team, NPP (New Payment Platform) attestation, SWIFT attestation.
  • Prepared the FRG attestation in March 2021 which helped in giving the summary of ITGC Control testing performed in FY21 and was reviewed and signed by the CTO.
  • Worked as scrum master which required capacity planning and control allocation to each team members. Created yearly control testing calendar which helped the team to schedule and plan the quarterly control allocation.
ITGCAI security & GovernanceRisk AssessmentGeneral computing controlInternal Controls

Target

Senior Technology Auditor

Apr 2016Apr 2019 · 3 yrs · Bangalore · Hybrid

  • Primarily responsible for performing the SOX Compliance ITGC Control testing including the Identity and Access Management, Configuration Scanning, Change Management and Computer Backup Operations, SOC 2 controls for the Bangalore Internal Audit team in coordination with the US IT Internal Audit function.
  • Responsible for Peer Review, SOX-IT Audit planning, Archer GRC tool reconciliation, SOX Playbook update.
  • Responsible for Project Management, including tracking the status of controls and ensure team members are adhering to the timeline for SOX ITGC Control testing deliverable.
  • Responsible for relationship management with the stakeholders (External Auditors, Second Line Of Defense, SOX Steering Committee) which includes representing the team in the weekly connect.
  • Responsible for Onboarding a new team member which includes training and Knowledge transfer.
IT AuditITGCIntegrated IT AuditSOX Compliance

Iron mountain

Senior IT Auditor

Jun 2015Mar 2016 · 9 mos · Bangalore

  • Performed the IT General Computer control testing for various applications adhering to SOX Compliance Program.
  • Lead audits of information technology systems, implementation projects and related governance practices to assess whether they meet business objectives, have effective internal controls, and comply with policies and procedures and Sarbanes-Oxley requirements.
  • Supported Bangalore integrated audits along with other Internal Audit team members.
  • Built the Global Internal Audit team internal page for onboarding process.

Cisco systems

4 roles

IT Risk Specialist

Nov 2011Jun 2015 · 3 yrs 7 mos · Bangalore

  • Performed SOX Compliance testing for ITGC controls like User Access Review, Password parameters
  • validation, Change Management controls, Batch Job Monitoring and Key Reports Reconciliation.
  • Lead, Coordinate and communicate the work status with SOX IT PMO team based USA
  • Responsible for overall analysis & delivery of the assigned processes.
  • Provide necessary guidance to teams to help them complete SOX quarterly testing & remediation (this
  • involves being their primary point of contact within SOX team for assigned processes testing)
  • Analyse, identify & drive process development and improvement around testing & remediation. Be a
  • driver for such efforts (e.g., optimization, pro-actively, innovation)
  • Drive change & drive awareness of SOX within infrastructure and application teams by tracking metrics
  • (schedule variance for testing, number of repeat exceptions etc.), timely communication & training (this
  • will involve creating training material as & when necessary)
  • Drive Status Meetings & follow-ups (e.g., progress reports, team updates, action/to-do lists, meeting
  • agendas, meeting minutes etc.)
  • Take on responsibility for mini-projects that relate to above requirements, as & when necessary.
  • Communication- Build Client Relations (e.g., establish productive and reciprocal relationships, manage
  • stakeholders)
  • Develop, Maintain and lead Client and Team Communications (e.g., facilitate information sharing,
  • advocate client positions, leverage team)
SOX 404Risk ManagementRisk AssessmentInternal ControlsSOX Compliance

Project Manager IT

Promoted

Sep 2009Oct 2011 · 2 yrs 1 mo · Bangalore

  • Worked on the overall responsibility for the successful initiation, planning, design, execution, monitoring, controlling and closure of ADM (Acquisition Data Management) and Benchmark Project.
  • Created a project delivery schedule that includes resource and material requirements.
  • Ensured that the project has completed the relevant requirements and that deliverables have been properly reviewed by stakeholders.
  • Tracked the project progress and scope using a project dashboard and/or internal/external status reports
  • Proactively identified the risks, communicate risks to appropriate stakeholders and developed a risk mitigation strategy and a contingency plan.
  • Defined acceptance criteria, prioritizes stakeholder requirements and defines the scope boundaries.

Lead Production Support Engineer

Promoted

Oct 2008Sep 2009 · 11 mos · Bangalore

  • Lead the team to work on error monitoring resolution and supporting the MODS ( Marketing Operational Data Portfolio)which contains consolidated and standardized information that directly pertains to the individual’s identity, work site, mailing and electronic addresses and preferences for communications by Cisco.

Production Support Engineer

Feb 2007Oct 2008 · 1 yr 8 mos · Bangalore

  • Monitored and performed the enhancements by providing the stabilization to the system and solving the user problems for the Japan Portfolio applications.

Education

Netaji Subhash Engineering College (NSEC)

Bachelor of Technology (B.Tech.) — IT

Jan 2002Jan 2006

The Bhawanipur Education Society College

ISC Science — Computer Science

Jan 1999Jan 2001

Julien Day School - India

Jan 1990Jan 1999

Stackforce found 100+ more professionals with Cybersecurity Control & Risk Management

Explore similar profiles based on matching skills and experience