Garima Lakhanpal
Adjunct Faculty – GRMI
Delivers “Information Technology Risk Management”
Director in Genpact Enterprise Risk Consulting practice and previously manager with the assurance and IA practice in Deloitte with 10+ years of experience in IT audits across financial services, consumer goods, retail, life sciences & Healthcare, and energy industries. Key Roles: External PCAOB audits, Agile Internal Audits, controls transformation, and SOx Readiness. Directly collaborated with client CTOs and CAEs of US$ billion corporates. Consistently top-rated and managed cross-geography projects and multi-location teams.
- Certified Information Systems Auditor, ISACA, 2014
- MBA (Finance & Marketing), IIT – Roorkee, India, 2011 – 2013
- B.Tech (ECE), GGSIPU, India, 2007 – 2011
- Managed seamless integration between global member firms (US, UK, Canada, Belgium) and offshore locations (Delhi, Hyderabad, Bengaluru) to develop a successful offshore delivery model and re-enforce a culture of ONE team.
- Coached and mentored over 100+ professionals during the tenure of 10+ years.
- Managed multiple stakeholder expectations by keeping scope, cost, timelines, and status of the project deliverables on track.
- Key Industries Served: Consumer & Industrial Products, Financial Services, Energy & Resources, Life Sciences & Healthcare
- SOX, SOC1 / SOC2 Readiness Assessment, COSO, COBIT
- Agile Internal Audits
- Control Rationalization
- Risk assessment and risk-control mapping
- Design, implementation, operating effectiveness reviews
- Use of audit tools such as Audit Board, Workiva, Archer, ServiceNow GRC, Connect tools
- Excel, PowerPoint, Vision
- PCAOB and AICPA auditing standards
- SAP ERP (S4, ECC, BI, GRC) and PeopleSoft ERP Auditing
- Operating Systems Auditing (Windows, UNIX, Mainframe)
- Database Auditing (HANA, Oracle, SQL)
- Tableau, Power BI
- RPA: Power Automate, UI Path (Learning)
- Director, EY, August 23 – Present
- Director, Genpact, August 19 – August 23
- Currently, leading a team of 40+ professionals delivering end to end IT controls (including SOx) projects for multiple large US and Europe based organizations across multiple industries
- Managed a revenue of over USD 5Mn+ as part of the current portfolio, responsible for delivering the audit and the overall project management efforts from offshore for audit committee reviews
- Perform control rationalization based on IT landscape complexity, materiality, and risk
- Performed review of IT controls and automated controls on multiple technology platforms such as SAP ERP, PeopleSoft ERP, operating systems (Windows, UNIX, Mainframe), databases (HANA, Oracle, SQL) and networks
- Assisted management in identifying inefficiencies in their current processes, developing controls, mapping risks to controls, creating risk-control matrices, developing an audit plan, and worked directly with the CAEs for periodic audit committee updates for multiple global locations such as US, Canada, UK, China, Japan, Mexico, Chile, etc.
- Implemented Agile way of working on Internal Audit clients by onboarding all key stakeholders and conducting training sessions
- Implemented multiple automation efforts by identifying areas of inefficiencies in the auditing process starting from risk assessment, walkthroughs, and till reporting
- Led and delivered teams performing pre-implementation reviews of new systems going live to ensure adherence to SOX standards
- Practice development initiates such as training content building, solution refreshes, multiple standardization initiatives across the practice
- Senior Solution Advisor, June 13 – June 19
- Worked with Deloitte USI as part of their SAP CoE team in the role of internal and external audit team member, leading one of the largest India delivered IA project for the world’s largest retailer.
- Implemented multiple automation efforts by identifying inefficiencies in the audit process from risk assessment to reporting.
- Led and delivered teams performing pre-implementation reviews of new systems going live to ensure adherence to SOX standards.
- Collaborated with clients on GRC platform implementations (Audit Board, RSA Archer, etc.), performing UAT before go-live to optimize various modules.
- Worked with digital and development teams to build automation solutions aimed at reducing manual efforts in control performance and control testing.
- Leveraged data analytics solutions for continuous controls monitoring and risk-based population assessments.
- Built real-time status update dashboards to provide key stakeholders with updates and highlight potential areas of concern.
- Part of the SAP CoE team responsible for developing and updating auditing frameworks for standardization.
- Multiple client appreciation rewards throughout the tenure
- Received client appreciation awards with highest remuneration on multiple projects
- Awarded multiple Outstanding, Applause, and Spot awards in every fiscal year
- Finished as the second team in an on-campus Deloitte wide competition – Deloitte Maverick, for developing an innovative solution to talent acquisition and retention problems
