Chinmay Kulkarni

CEO

Hoboken, New Jersey, United States3 yrs 1 mo experience

Key Highlights

  • Built a community for 10,000+ auditors.
  • Expert in ITGC and risk-based auditing.
  • Mentored junior auditors to enhance audit quality.
Stackforce AI infers this person is a Technology Risk Consultant with expertise in IT auditing and compliance in the Fintech sector.

Contact

Skills

Core Skills

Internal AuditCybersecurityIt AuditItgcSoc 2Technology RiskMentoringUniversity Teaching

Other Skills

Risk ManagementData PrivacyOnline Content CreationITACICFRSOX ComplianceExternal AuditsTrust ServicesSOC 1SOCRIt application ControlsAccountingFinancial AnalysisFinancial AccountingSarbanes-Oxley Act

About

Most new auditors are thrown into ITGCs, SOC reports, and workpapers without a map. I know, because I was one of them. Today, 10,000+ auditors learn from my content how to simplify the audit game. When I started out in IT audit, I didn’t have a playbook. No one told me what to say in a walkthrough. No one explained how to structure workpapers. And no one warned me how lonely and unclear the first 2 years can feel. So I learned the hard way. Most people think audit is about checklists. I used to think that too until I started doing it. But here’s the truth no one told me. Auditing is more than SOX and control matrices. It’s about asking the right questions. Documenting clearly. And thinking like a risk advisor and not like a robot. I stayed back reworking control language. Sat through walkthroughs I didn’t fully understand. And slowly figured out what actually works what clients expect, how real audits run, and how to survive (and then thrive) in this career. Today, I share everything I wish I knew back then. Not as a thought leader. But as someone who’s still learning just with a bit more hindsight. I’m Chinmay, a Technology Risk Consultant at EY, where I audit the IT systems that power financial statements of public companies. In simpler terms, I help ensure the numbers are right by making sure the systems behind them are secure, controlled, and compliant. My goal? To build India’s most practical IT audit community one story, one lesson, one insight at a time. What I share? • ITGCs, risk-based auditing, SOX 404, SOC 1/2 • Control testing, documentation, and walkthroughs • Audit communication, mindset shifts, and career tips • Cloud, privacy (ISO 27001, 27701), and AWS insights • Frameworks like NIST, COBIT, ISACA, PCI DSS If you’re 0–3 years into your audit journey or managing a team that is, I’m building content for you. Because stories teach more than slides. And in audit, clarity is everything.

Experience

Barclays

Assistant Vice President, Internal Audit

Feb 2026Present · 1 mo · Whippany, New Jersey, United States · Hybrid

  • Now on the other side of external audit! Focused on resilience, cyber risk, and clarity. More details to come soon :)
Internal AuditCybersecurity

Ey

3 roles

Technology Risk Senior

Promoted

Aug 2025Feb 2026 · 6 mos · Hoboken, New Jersey, United States

  • Executed IT integrated audits to provide independent assurance over effectiveness of IT General Controls (change management, access control, IT operations, disaster recovery), IT Application Controls and business process controls over financial reporting and financial statement audits.
  • Led risk assessments and design ITGC test procedures across business processes (e.g., revenue, payroll, inventory, cycle counting) to address the risk of material misstatements through control optimization.
  • Performed SOC 2 walkthroughs for a global workforce and HR management services client focusing on IDS/IPS configurations, vulnerability management, secure data storage, digital certificate management and data privacy.
  • Mentored 4+ junior auditors and reviewed 48+ workpapers per quarter for compliance with EY and PCAOB standards, enhancing audit quality and team collaboration.
  • Tracked engagement budgets greater than 8000 hours via B2A analysis, identified cost variances, and implemented corrective actions to improve resource utilization by 22%.
  • Coordinated audit sprint planning and scoping, identified key controls and optimize task prioritization, resulting in 16.8% faster audit completion cycles.
  • Communicated complex control findings to clients in clear and concise terms, effectively helping them understand the underlying risks and their potential impact, enabling informed decision-making.
IT AuditITGC

Technology Risk Staff 2

Promoted

Aug 2024Aug 2025 · 1 yr · Hoboken, New Jersey, United States

  • Performing SOX 404 IT application control assessments for clients based in Boston as part of Ernst and Young's technology risk practice.
  • Executing IT audit procedures for Financial Integrated IT Audit, ensuring the integrity and compliance of various financial processes critical to the client.
  • Documenting IT general controls assessments, including design and operating effectiveness for change management, logical access, and IT Operations.
ITGCIT Audit

Technology Risk Staff 1

Jul 2023Aug 2024 · 1 yr 1 mo · Hoboken, New Jersey, United States

  • Performing SOX 404 IT application control assessments for a major life sciences client based in Boston as part of Ernst and Young's technology risk practice.
  • Executing IT audit procedures to support the financial audit team, ensuring the integrity and compliance of various financial processes critical to the client.
  • Overseeing IT general controls assessments, including design and operating effectiveness for change management, logical access, and IT Operations.
Online Content CreationTechnology RiskIT Audit

Khoury college of computer sciences

Graduate Teaching Assistant

Jan 2023May 2023 · 4 mos · Boston, Massachusetts, United States

  • Mentoring a class of 39 graduate students in the CY5200 Security Risk Management and Assessment course through one-on-one sessions and weekly office hours to resolve questions about assignments, lectures, and tests.
  • Assisting students in understanding ITGCs, risk assessments along with drafting security policies and compliance controls.
  • Grading questions for exams and weekly assignments to enhance understanding of various of risk analysis processes.
MentoringITGC

Fidelity investments

IT Audit Analyst Co-op

Jul 2022Dec 2022 · 5 mos · Boston, Massachusetts, United States

  • Involved in supporting Fidelity’s Asset Management (AM) Business Unit to audit 3 platforms across access control, change management, business continuity, disaster recovery and resiliency operations.
  • Performed compliance testing of internal IT general controls (ITGCs), evaluating their design and operational efficiency, determining risk exposure, and establishing risk-mitigation strategies.
  • Participated in standup meetings, sprint reviews, backlog refinement, and scrum ceremonies with the squad leader and the scrum team to generate user stories, sprint evaluations, risk assessments, and other audit documents.
ITGCTechnology Risk

Khoury college of computer sciences

Graduate Teaching Assistant

Jan 2022May 2022 · 4 mos · Boston, Massachusetts, United States

MentoringUniversity Teaching

Education

Northeastern University

Master of Science - MS — Information Assurance - Cybersecurity

Sep 2021May 2023

Vishwakarma Institute Of Technology

Bachelor of Technology - BTech — Computer Engineering

Jan 2017Jan 2021

Stackforce found 100+ more professionals with Internal Audit & Cybersecurity

Explore similar profiles based on matching skills and experience