Aishwarya Vallipilli
GRC Analyst
About
GRC Analyst with hands on experience executing SOX-aligned ITGC control testing across Identity & Access Management (MFA/Passwordless Authentication, Password Hardening, User Access Reviews, Privileged Access Reviews, Segregation of Duties), Vulnerability Management (SAST identification and remediation), Configuration Management (baseline configuration), Change Management (change validation and approval), Asset Lifecycle Management, Third-Party Risk Management, and Disaster Recovery (DR plan review, testing, and backup validation) for Tier 1 financial applications across IaaS, PaaS, and On-Premise environments. Skilled in Test of Design (ToD) and Test of Effectiveness (ToE), audit workpaper preparation, and stakeholder walkthroughs, with a consistent track record of Pass ratings and on-time remediation closure.
Skills & Expertise (18)
Work Experience
GRC / Cyber Risk Analyst — ITGC & UAR
Wipro Limited
Mar 2025 - Sep 2026
Executed periodic User Access Review (UAR) cycles for Tier 1 trading applications per the control testing schedule, verifying user access provisioning and reviewing access for appropriateness. Tested Identity & Access Management (IAM) controls for Tier 1 trading applications, reviewing user access provisioning and logical access control effectiveness as part of monthly control cycles. Performed SOX-aligned ITGC operating effectiveness testing across Change Management, Logical Access, Configuration Management, Asset Lifecycle Management, and Disaster Recovery domains, consistently achieving Pass ratings. Prepared audit-ready workpapers with supporting evidence in ServiceNow, documenting control testing results for internal and external audit reviewers. Coordinated with application and control owners to track control exceptions, prepare remediation status updates, and close compliance findings within established SLA timelines, with zero instances of timeline exceedance. Led walkthrough discussions with business and IT stakeholders to document process narratives and assess control design and operating effectiveness. Performed vulnerability management reviews, validating SAST/DAST scan results for Tier 1 trading applications as part of the monthly control testing cycle. Maintained fully digital audit workpapers and testing records in ServiceNow, eliminating manual paperwork and ensuring audit-ready documentation. Utilized Microsoft Copilot and Workday-based email automation to streamline tracker maintenance, reducing manual effort in finding and remediation tracking. Supported ITGC activities across IaaS, PaaS, and On-Premise environments, assessing control design and operating effectiveness. Performed Test of Design (ToD) and Test of Effectiveness (ToE) for applicable IT controls and documented testing results with supporting evidence. Supported third-party/vendor audit activities and reviewed SOC 2 Type I and Type II reports for relevant control coverage and compliance considerations. Supported internal and external audit requirements by identifying control gaps, compiling audit results, and coordinating remediation with control owners and stakeholders.
Cloud & Data Analytics Intern
HMI Engineering Solutions
Feb 2024 - May 2024
Monitored AWS infrastructure (EC2, VPC, EBS, Lambda, CloudFormation) using CloudWatch, tracking uptime and resource utilization across cloud instances. Built data analysis reports and dashboards using Excel and Tableau to support cloud operations decision-making. Documented cloud configuration and operational procedures, supporting handoff to the operations team.
Education
Bachelor's of Science
2021 - 2024 · India
Bachelor of Science, Data Science - Aditya Degree College
- 2024 · Afghanistan
Intermediate (MPC) - Aditya Junior College
- 2021 · Afghanistan
Certifications
Oracle Autonomous Database Cloud 2025 Certified Professional
Oracle University · 2025
Oracle Cloud Infrastructure 2025 Certified Foundations Associate
Oracle University · 2025
Oracle Cloud Infrastructure 2025 Certified AI Foundations Associate
Oracle University · 2025
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (18)
Click a skill to find developers with the same skill
