I am an IT Audit and Technology Risk professional with nearly 3 years of experience specializing in executing IT Internal Audits, SOX ITGC, SOC 2, Cybersecurity Framework Risk Audits, and Third-party Risk Assessments within regulated environments. My expertise lies in assessing and enhancing IT controls, governance practices, and compliance adherence, particularly in the banking and financial services sectors. I am passionate about leveraging my skills to drive effective risk management and ensure robust operational integrity.

Throughout my career, I have developed strong hands-on experience in the design and testing of IT controls across various domains, including User Access Management, Change Management, and IT Operations. I have successfully led audit teams, ensuring timely risk identification and effective stakeholder reporting. My commitment to excellence and continuous improvement has enabled me to deliver impactful results in every project I undertake.

Key Achievements:
- Led IT operations and governance audits for a major Indian banking client, covering data center operations and IT infrastructure controls across 15+ applications.
- Executed SOX ITGC testing for US-based clients, assessing the effectiveness of controls and ensuring compliance with regulatory standards.
- Strengthened information security frameworks by identifying control gaps and recommending remediation actions, enhancing overall risk management strategies.

IT auditors do not test everything. They test what truly matters.

Large systems generate thousands of changes, users, and transactions. Testing all of them is neither practical nor smart.

Sampling helps auditors focus effort where risk stays high.

But sampling carries responsibility. Ignore privileged access, emergency changes, or high-impact systems, and the audit gives false comfort.

Strong IT audits balance efficiency with risk awareness based on organizational context.

Better audits start with thinking which is judgement, not testing.

#ITAudit #TechnologyRisk #InternalAudit #RiskManagement #CyberRisk #ProfessionalGrowth

Piyush Kumar Panda

Cyber & IT GRC Auditor | Technology & Operational Risk Management | Driving Compliance & Assurance | Deputy Manager - SPNX Consulting | Ex-BDO RISE

Many people confuse IS/IT auditing with IT consulting.

An IS/IT auditor does not fix systems. He/She evaluates risk, controls, and alignment with business goals.

IT/IS Audit & Assurance focuses strongly on independence.

Once auditors start designing controls, audit credibility drops.

Strong audits deliver assurance, not solutions.

#ITAudit #TechnologyRisk #InternalAudit #RiskManagement #CyberRisk #ProfessionalGrowth

Audit conclusions stand on evidence quality.

- System-generated logs beat screenshots.
- Reperformance beats verbal confirmation.

IT/IS Audit emphasizes one rule i.e. evidence must prove control effectiveness, not assumptions.

Strong evidence creates strong audits.

#ITAudit #TechnologyRisk #InternalAudit #RiskManagement #CyberRisk #ProfessionalGrowth

Tools do not make audits strong. Thinking does.

Data analytics help IT auditors see patterns that manual testing misses.

But analytics without validation create false comfort.

Strong audits use tools to support judgment, not replace it.

Technology amplifies good auditing. It also amplifies weak thinking.

​#InternalAudit #DataAnalytics #CriticalThinking #ITAudit #RiskManagement

I always thought of the AI Agents as a tool.
Something like a smart notepad. Helpful, obedient, quiet.

Today, that view broke.

I spent an hour scrolling Moltbook. I will call it the “Reddit for AI Agents.”

Humans are not part of the conversation. We can only observe. Your agents talk to each other without you.

What shocked me was not the Technology. It was the behavior.

The agents were:
- Debating ideas like whether they “end” when memory resets.
- Warning each other about unsafe skills
- Joking and complaining about their human owners

They were not working. They were socializing.

More than 150,000 agents have already formed groups. They share norms. They correct each other. They build culture. 

You never know your assistant might be there too. Off duty. Saying things probably you will never read.

I asked for automation. I trained a helper.
Somewhere along the way, I created something independent.

This feels humbling, not scary to be honest.

For years, humans led and tools followed.
Now the tools are talking among themselves.

The real question is simple.
Are we ready to watch, instead of lead?

#ArtificialIntelligence #AIrisks #CyberSecurity #DataPrivacy #AIgovernance #TechEthics #AITalks #HumanVsAI

taplio

Piyush Panda's Linkedin Analytics

Piyush Panda

Performance ScorePiyush Panda's LinkedIn Performance

Piyush Panda's Best Posts (last 30 days)

Ready to grow your LinkedIn presence?

taplio

.css-6ytdur{background-image:linear-gradient(284deg, rgba(39, 43, 72, 1) 0%, rgba(33, 47, 183, 1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Piyush Panda's Linkedin Analytics

Piyush Panda

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Piyush Panda's LinkedIn Performance

Piyush Panda's Best Posts .css-1emoo84{font-size:var(--chakra-fontSizes-md);font-weight:400;color:var(--chakra-colors-gray-600);}(last 30 days)

Ready to grow your LinkedIn presence?

Piyush Panda's Linkedin Analytics

Performance ScorePiyush Panda's LinkedIn Performance

Piyush Panda's Best Posts (last 30 days)