Shilpa Doiphode

Led risk-based control assessments across user access, change management, and IT operations to identify risk exposure. Executed CUEC and third-party risk assessments, evaluating control design and effectiveness against audit standards. Conducted end-to-end SOC 1/SOC 2 control testing across all domains. Reviewed audit trails, backup/recovery, and resilience controls to ensure data integrity. Applied frameworks including ISO 27001, SOX, SOC 1/2 across engagements.

• Performed ITGC testing across user access management, change management and IT operations for global assurance clients • Executed control design and operating effectiveness testing across SAP and non-SAP applications, documenting evidence to engagement standards • Supported SOC 1 and SOC 2 reporting engagements across applicable control domains • Prepared audit documentation and workpapers, and tracked identified issues through to client remediation • Promoted to Consultant in October 2025

Conducted SOX testing of ITGCs across User Access, Change Management, and Job Monitoring. Performed CUEC testing for SaaS applications and hands-on ITGC testing across SAP S/4HANA, SAP FMS, SAP GRC, and non-SAP applications for PCAOB clients. Identified control deficiencies within SAP environments and provided practical mitigating procedures. Evaluated audit trails and tested design, implementation, and operating effectiveness. Completed a 4-month Deloitte USI secondment supporting global ITGC audits