Chandan Somashekar
London
Summary
CISA-certified IT Audit and Risk Advisory professional with 8+ years of experience specialising in ITGC, SOX compliance, SAP controls, and third-party assurance (SOC 1/2/3). Proven expertise in delivering end-to-end audit and advisory engagements, including RACM design, control framework assessments, and internal control optimisation. Strong track record of supporting UK-listed organisations with SAP governance, risk management, and stakeholder-led delivery across multiple sectors.
Overview
9
9
years of professional experience
1
1
Certification
Work history
ASSISTANT MANAGER
BDO UK
London
2023.05 - Current
- Delivered ITGC and application controls testing across external audits, SOX programmes, and MIS engagements.
- Assessed IT controls against internal policies, SOX, and industry standards, identifying control gaps and providing actionable recommendations.
- Advised clients on UK Corporate Reform and SOX readiness, supporting large-scale IT control transformation programmes.
- Led SAP IT audits covering access management, user access reviews, change management, and SoD analysis.
- Delivered SAP GRC reviews including ruleset optimisation, Periodic User Access Reviews (PUARs), and firefighter access management.
- Strengthened SAP control environments through SoD remediation and governance improvements across SAP ECC and S/4HANA systems.
- Performed end-to-end cloud governance reviews, including planning, RACM design, testing, and reporting.
- Reviewed cloud controls across vulnerability management, patching, incident management, and secrets management.
- Designed and implemented control frameworks for Oracle Cloud, Microsoft Azure, and Google Cloud environments aligned to SOX requirements.
- Conducted Business Continuity Planning (BCP), Disaster Recovery (DR), and backup testing assessments.
- Led IT Controls Readiness engagements, conducting gap assessments and developing RACMs, remediation plans, and process flow documentation.
- Facilitated remediation and controls embedding workshops with senior stakeholders to ensure sustainable improvements.
- Conducted end-to-end process walkthroughs to evaluate control design and operating effectiveness.
- Managed engagement delivery, including reviewing outputs, tracking budgets, and ensuring timely completion.
- Built strong client relationships through effective communication and expectation management.
- Coached and mentored junior team members in IT audit, SAP controls, and SOX testing.
ASSISTANT MANAGER
KPMG UK LLP
London
2022.04 - 2023.04
- Facilitated client engagements in IT external audit ensuring compliance with audit quality requirements.
- Conducted testing of IT controls and identified process risks to enhance audit outcomes.
- Assisted in building strong client relationships through effective communication and collaboration during audits.
- Supported junior team members on IT audit practices to improve team performance and knowledge.
- Contributed to the delivery of high-quality audit reports on time, meeting client expectations and compliance standards.
SENIOR EXECUTIVE (IT AUDIT)
KPMG Global Service Pvt Ltd
Bengaluru, India
2017.02 - 2022.03
- Supported end-to-end audits through conducting walkthroughs and testing of ITACs and GITC for SOX, ISAE 3402, and SOC 1 engagements.
- Conducted SAP ITGC and IPE/report testing across healthcare, manufacturing, retail, and automotive sectors to assess compliance and control effectiveness.
- Facilitated client walkthrough calls to gain insights on processes and controls, informing audit strategies and improving engagement outcomes.
- Ensured timely delivery of high-quality reports for each engagement, enhancing client trust and satisfaction.
Education
Bachelor of Engineering - Telecommunication Engineering
Visvesvaraya Technological University (VTU)
Karnataka, IndiaSkills
IT External Audit
IT Internal Audit
IT Risk Advisory
Internal auditing
GRC controls
SOC1 and SOC2
Data analysis
Windows and Linux
Microsoft Office
Operating System: Microsoft Windows family, and Linux
Programming languages: basics of C, C
Client relationship management
Team leadership
Communication skills
Training facilitation
Certification
Certified Information Systems Auditor (CISA)
Credential ID : 29938c88-f66c-4210-a952-625bb4e484a8
Credential URL : https://www.credly.com/badges/29938c88-f66c-4210-a952-625bb4e484a8/linked_in_profile
Languages
English
Fluent
Timeline
ASSISTANT MANAGER
BDO UK
2023.05 - Current
ASSISTANT MANAGER
KPMG UK LLP
2022.04 - 2023.04
SENIOR EXECUTIVE (IT AUDIT)
KPMG Global Service Pvt Ltd
2017.02 - 2022.03
Bachelor of Engineering - Telecommunication Engineering
Visvesvaraya Technological University (VTU)