Loyola College

Madras University

Senior Consultant - Compliance, GRC, IT Audit & Security Advisory

Walnut Creek, California, United States

Currently working on short-term engagements for PwC Clients across North America. Engaged in Internal Controls Review for SOX ITGC assessments, Application Controls Review, general operating controls effectiveness project at CommScope. Most projects involve managing offshore AC Team, Conducting Walkthroughs, setting up testing attributes and steps, providing guidance around control objective (goals) and support needed across ITGC, Automated Controls and Independent Controls. Also assisting in 2021 review of Aviation Audit for CommScope’s annual controls assessment (Non-IT) per NBAA Standards. Highly experienced in Oracle ERP On-Prem & Cloud Applications annual controls assessment in addition to other ERP and IT Infrastructure review projects.

Senior Consultant

Taking on the responsibility of the Lead Security Advisor on this Oracle Cloud ERP (Financials) Implementation project, the current role as requested by the client, is to validate development work done by previous team members around Role design, Auto-Provisioning, Segment Value Security (SVS), OTBI Reporting, Temporary Assignments, Personalization & Knowledge Transfer. Worked on SIT, UAT and Training with various trams in the DOE. Additionally, the client requested that I provide them best practices around IT Oracle Support Management and Maintenance activities for the DOE, build their training and CRP sessions, work with them on incorporating categories for support via ServiceNow ticketing system, build policy around Incident Response and Solution Delivery. Overall, played a key role in taking the DOE into Production (G0 Live) with the assurance that they have adequate internal support knowledge and human capital to sustain support post go-live.

U.S. Department of Education

Senior Independent Consultant - Cloud Security Advisor

As an advisor/project manager, I was responsible for structuring a plan to create Unified Controls Framework built on baseline controls with controls standards for 13 application environments in scope. Built detailed Project Plan with schedule and resource allocations; Organization Change Management Plan; Training Plan. 190 controls within the CIS Top 20 CSC Framework were the starting point for mapping back to the Controls Standards. Motiva Quality/Validation representation was to act as a “QA” function, not as a test executor, (this allows the delivery team to move at a faster pace). Team members performed test steps and provided testing results from Jan. 1, 2020 forward (using sampling guidelines where required). Conducted risk workshops with relevant project stakeholders to document general and project specific risks, rank the risks on criticality and likelihood, and document the impact and recommended mitigations. Identified the population of users that required training, the delivery methods for the training, the training schedule, and identify training courses that are a pre-requisite for production access. Conducted Controls Assessment, Test for design (Walkthroughs) and Test Operating effectiveness, Gap-Fit, Evidence gathering, RCM build, final packaging & provided Remediation Recommendations. Leveraged baseline standards of the following Control Standards: NIST 800-53, COBIT 5, ISO 27002, and ACS (specific to Motiva).

Motiva Enterprises LLC

ITGC/Application Controls

Design, Build, Support & Manage Oracle Fusion Financials implementation project that includes custom API based integration roadmap development & Facebook applications synchronization. Advice on upgrade of Oracle GRC On-Premise to Oracle Cloud R13 Update 19B Risk Cloud integration with business processes across AP, AR, FA, GLModules.  Product Owner of R13 Oracle ERP Cloud Security @ Facebook. Focused on designing and building Custom Roles with Data Security policies for Global ERP Fusion Product deployment for Facebook. Heavy focus on working with corporate IT Policy makers while designing User Provisioning with Job Roles & Inherited Duty Roles. Rendered
design work around Access Controls Manager and PEA/PCG workflows. Working with Oracle Support & Development team to identify APIs required for integration opportunities. Other tasks included working with/mentoring support teams in managing R13 Oracle Fusion implementation users, creating and deploying application users, provisioning roles, designing data security policies, security console based role design and deployment. Defined Implementation Projects and assigned to the setup user and assigned the respective Security roles to complete the setup for the financials Modules Overall, Extensive experience with R13 Cloud Common Applications 18B.

Facebook

Global Cloud Fusion GRC Implementation - Sr. Advisor

Managed new Product Development for NY DDC´s Construction Project Management Activities. Focus on building requirements from Legacy Project Management tools specifically related to project budgeting & Forecasting tools. Building roadmap to integrate Cloud SAAS/PAAS Applications that needed to be with multiple home build legacy extensions. Worked with Various agencies (clients) such as FDNY, NYPD and DoT. Managing mock EBS Integration around the Financial Accounting Hub – setting up accounting accounts, create and assign sources, source definitions, setup gapless event creation, setup drill down capabilities, setup transaction account builder etc. Managed the Fusion Cloud Financials Track. Managed the configurations of Oracle Cloud Fusion Financials (General Ledger,
Accounts Payable, Asset Management, AGIS, Advance Collections, Accounts Receivables, Cash & Expense Management).Financial Functional Lead for Gathering Requirements, Solution Design, Initial Conversion (Supplier, Customers), Setup, CRP/User Testing Sign-Off, Identify Gaps and provide Custom Solutions/Functions as needed and Reporting. Design and implement/test Procurement, AP, Payments, Expense, CM, SLA and Cloud Taxes

NYC Department of Design and Construction

Product Manager - Security Architecture

New Business Development
Providing Oracle GRC related guidance to Client Executive committies
Building the foundation to Oracle Applications GRC Projects
Global GRC Practice Building for Infosys Ltd.

Infosys

Senior Principal -  GRC Practice Head

Advisory services to the CIO of the US Mint.

Developing Enterprise Applications Architecture with Oracle GRC Security Products around expansion plans (Roadmap) of Oracle eBusiness Architecture (Office of the CIO) - Oracle Order Management, Oracle Financials, Oracle iStore, Oracle Warehouse Management & Hyperion Reporting (Proposed Future state architecture)
Analyze IT security environment and develop threat and vulnerability assessments.
Conducted System Certification and Accreditation, performed security and vulnerability analysis
Conducted general security controls reviews, Security documentation reviews, Security assessment and assisted in policy development
Hand-on experience evaluating systems for  FISMA and OMB A-13, NIST Special Publication 800-53 Revision  & PCI DSS compliance
ASV & QSV PCI DSS Evaluation (Verizon Business)
Foundstone & Nessus Scanning Result Analysis and reporting to the OCIO.
KPMG Quarterly Audit management

US Mint

Advisor to the Office of the CIO - Principal Security Consultant (ES) - Independent Contractor

- Responsible for Sales, design, Integration Testing, UAT, Go-Live Transition and Post Go-Live Maintenance for FSA Servicer Loan Program.
- The program involved securing 4 interfaces in the General Ledger, Accounts Payable, Accounts Receivable and an Outbound Treasury Confirmation interfaces. Used Custom code; Oracle Applications Security; Internal Controls Manager & Exclusions.
- Functional team Lead responsible for designing the security architecture around General Ledger Interface and the Accounts Payable Invoice interface;
- Responsible for design and testing of 4 Discoverer reports security to support the Servicer program;
- Responsible for Unit and Integration Testing and UAT lead for testing with FSA Users and Loan Servicer;
- Responsible for preparing Functional Design Document, User Procedures, Test Scripts and Production Handbook for GL and AP Interfaces.

US Department Of Education

Senior Consultant - Independent Contractor

- FY2008 SOX controls assessment (Walkthroughs, Test for design effectiveness, Test strategy & execution of test for operating effectiveness)
- Reviewing ICFR Applications related to SAP, Treasury & PeopleSoft applications running on Oracle database platform
- Managing a team of 4 IT Auditors, providing guidance on documenting control activities across the organization

The World Bank

Gather Business Requirements for Cognos OLAP Cubes
Manually assess existing APRIMO reports to develop Business Requirement Documents (Cognos)
Work on Reports, Cubes & Portal on IBM Cognos 8 BI
Work with Process Owners (finance, Market Research & Sales teams) to understand their processes
Review executive digital dashboard requirements

Laureate Education

Senior Business Analyst - Independent Contractor

Assessment of Oracle 9i & 10g databases CLIENT: Fannie Mae, DC
2008 SOX internal controls assessment walkthrough
Assessment of Peoplesoft Financials (GL & AP Modules)
Working with various business owners in assessing controls around 2008 new business processes
Writing test scripts to validate control activities
Mapping Controls Objectives to RCA documentation
Working Deloitte external auditors in benchmark testing

Fannie Mae

Access Specialist - Independent Contractor

Assessment of their DB-2/MS SQL Server 2000/MS Access/Mainframe/TAXL/AG Edwards Applications.
Verifying data security within their WS Data Warehouse architecture.
Comparing data structures with Bloomberg (specifically FTX, OID, Bond Factor, VARR, Frequency & First Coupon Field in Error Types

Wachovia Securities

Project Manager - Independent Contractor

Governance, Risk & Complaince Consultant (Access Control, Security & CM)
Oracle Applications 11.5.10.2 (ICM/ITA/GRC Assessment; Building Project Timeline; Resource Allocation, Budgeting, Project Scheduling & Management
SOX Applications Controls Assessment of existing Oracle Applications environment
Setting up Organizations in HR, linking Org Structure with ICM SSW interface for Process Certification
Defining ICM SoD Responsibility Level Setup, Setting up Rules, Profile Options & System Parameters
Convert manual SoD rules to OICM (AMW.E RUP6) format, create constraints & run violation reports
Process Certification & Financial Statement Certification
Install ITA.A, setup & create audit reports from audit groups
Integration with e-Business Suite  (GL/AP/AR/FA/PO/CM)
Review Oracle GRC (Oracle Applications Access Controls Governor) Access Policies for preventive controls, Creating Dimensions &  Conflict resolution
Assessing Transaction Controls Governor and Preventive Controls Governor for 2009 implementation
Worked with DBA team in reviewing installation requirements for GRC Embedded Agents & setting up Oracle Application eBusiness 11.5.10.2 to synchronize with GRC Suite

Activision, Los Angles

Technical Project Manager - Independent Contractor

Project scoping, management & delivery
Assess & implement Oracle Internal Controls Manager (AMW.E RUP5) - SOX & BASELL
Review process/risk/controls & procedures for OICM implementation
Work with Internal Audit/Oracle Applications Implementation Team in reviewing requirements
Build Audit Procedures / Audit Engagements
Configure Oracle Internal Controls Manager for Oracle Applications 11.5.10.2
Full-life cycle implementation; Applications Framework Evaluation & Applications Security (ITGC

Mediacom

Managed QA of End User Computing applications review
Hands-on analysis of remediation plans (SOX Sec 404)
Expert advice on evidence gathering and type of evidence required for re-testing
Oracle Applications, Oracle 9i database, Access and Excel EUC applications testing

Applications Controls Review; Provided expert advice on working with Deloitte external audit team (SOX Sec 404)
Analyzed work done by testing team, performed quality control, made corrections and collected additional evidence.
Worked on Oracle applications functions, menus, security validations, profile options, user security etc.
Worked closely with the Director of Audit and the Project Manager

GlobalPay Inc., Atlanta

Specialist Consultant - Independent Contractor

Performed SOX Testing for controls (both Application and General Controls) in SAP, ADP, Hyperion,
Concur, Network, Checkpoint and CISCO Router software.
Worked with Management in assessing exceptions noted and writing up recommendations
that could be used toward remediation
Worked on Change Management, SDLC and Security (Access control) controls and processes.

Business Applications Review

Worked on writing narratives for the application controls
Reviewing relevance of business processes and the application controls that need to be in place
Analysis of JD Edwards financial modules and the controls in place
Worked with the SOx management team in rewriting narrative and revalidating the

Sarbanes-Oxley Practice

SOX Consultant - Independent Contractor

Conducted Sarbanes-Oxley audit for the corporate office, domestic and international sites in remediation of deficiencies in Windows 2000 Active Directory, Hyperion, SAP, IVantage, Solomon, AS/400, ADP and General IT controls.
Conducted tests, provided remediation, documented processes and evaluated results.  This focused approach led to the successful completion of regulatory compliance on time and within budget.
Interviewing IT managers, SOX General/Application Control analysis (pass/fail verdict)

IT Applications & General Consulting practice

Internal Audit Consultant - Independent Contractor

Business Applications Review & Assessment; Prepare General control and Application control matrices
Design test plan for client's SOX 404 Internal IT compliance certification
Conduct interviews with IT senior management and business stakeholders
Work with standards for financial reporting and developed recommendation of public companies
Gap Tracking, recommendations, prepare evidence to support test compliance  & Remediation planning
Work with security team and IT/Apps management in ascertaining the importance of security control, SDLC. Change management, corporate accountability and user access.

Oracle Applications Architect (Maintenance)
Oracle Applications 11i

Superior Essex

Senior Audit Consultant - Independent Contractor

Manage, Design & development of Oracle Purchasing (iProcurement) customizations & extensions for one of the largest Oracle Applications e-procurement projects in the World.
IT Lead for the Global e-business Oracle Applications iProcurement production systems maintenance team.
Worked hands-on with SOX 404 internal audit compliance ground work, specifically SCRP & ACR. Solid exposure to evidence gathering, SCRP questionnaire, documentation, identifying gaps, making recommendations to stakeholders on non-compliance, working with developers in identifying best use etc. Worked on MTOS (Machine Tool Order System) and eVEREST (Oracle Applications) internal applications control audit.
Created, managed and administered re-engineering and migration of Ford Motor Company's legacy systems into an always-evolving Oracle Applications environment.
Solid hands-on exposure to AIM
Extensive interaction with Buyers, Suppliers and Business Managers. Extensive experience working hands-on with Oracle iProcurement 11i.
Solid experience with Oracle HRMS/Financials (AP/AR)

Ford Motor Company

Built and managed the Oracle Applications (AP/AR/Fixed Assets/GL/SISPRO/Cash management/iExpenses) internal support & development infrastructure in Latin America, North America & Spain for StarMedia, a $2 Billion Internet Media Giant during the Internet Boom era.
Very experienced with support center management and personnel training
Worked on supporting strategic approaches for consolidating multiple Oracle Applications instances.
Hands on experience implementing Oracle Expenses
Oracle Consolidation (South America, Spain & North American set of books) using ADI
Mapping Chart of Accounts to US GAAP
Worked hands-on with HR, CM, AP, AR, FA, GL and tools like GLDI (ADI), FSG etc. (11.0.1, 11.0.3 & 11i)
Designed the framework for our data warehouse, used tools like Cognos OLAP and MS Digital Dashboard based technologies extensively
Designed Migration from ADP PC Payroll to a more robust ADP Mainframe - Oracle Applications HR module (synchronized bi-directional data transfer from ADP mainframe into HR/GL)
Worked as the head Oracle applications technical/functional advisor to the CFO and finance group
Worked with reporting/OLAP tools like FSG, Crystal Reports, Powerplay Enterprise Server, Powerplay Development Tool, Cognos Impromptu, Visualizer & Oracle Reports
Worked extensively with Asset Management, Inventory control (integration) and change management. Strong experience as an Enterprise Apps. Project Manager.
Involved in International Software implementation, support, training and purchase of Oracle Financials, HRMS and CRM applications.

starmedia network

Sr. Projects Manager

Genesys International Corp

Technical Coordinator / Consultant

designing & developing Oracle Application Server products.
Responsibilities included establishing the data structures, documenting the DDLs, and developing the application using Oracle PL/SQL procedures/packages & HTML.
Created and managed implementation project plans, directed implementation team, interacted with client's senior management team, assisted in business requirements analysis, tailored the software, and delivered training.

Oracle Financials Implementation Team Member; Worked on Oracle Applications 10.6.1 SC.
Worked as faculty member for two months teaching functional aspects of Sales Tax implementation and VAT.
Switched to active participation in simulated implementation work environment and worked on AR and GL.
Also worked on AP and FA to better understand the way the application handled accounting principles

Data Software Research Co. Ltd

Team Lead

Involved in the design and development of a personal information system.
Developed payroll & benefits applications
Worked on various forms, reports, and programs using SQL*Forms 3.0 & SQL*Plus.
Created documentation for system implementation and programming conventions.

Shyam Radhakrishnan

Shyam Radhakrishnan