PEARSON RANGWANI (CISA)
Dubai
Summary
Experienced Senior IT Auditor specialising in IT audits and assurance across banking, aviation, telecoms, manufacturing, and government sectors. Expertise includes IT general and application controls testing, cybersecurity audits, and conducting SOC 1 and SOC 2 reviews. Proficient in risk assessments and regulatory compliance evaluations aligned with NESA, SWIFT CSCP, ISO 27001, and COBIT. Utilises data analytics tools to enhance audit effectiveness and coaches teams to strengthen IT governance.
Overview
8
8
years of professional experience
1
1
Certification
Work History
Senior IT Auditor 2 (Assistant Manager)
PwC Middle East
Dubai
05.2023 - Current
- Lead IT audit planning, fieldwork, and documentation for clients across multiple industries including aviation, telecoms, government entities, insurance, and commercial organisations.
- Perform ITGC, application controls, cybersecurity, and business continuity reviews across complex IT environments.
- Reviewed SOC 1 and SOC 2 reports, assessed third-party risks, identified control gaps, and recommended compensating controls to strengthen client compliance.
- Conducted NESA and SWIFT CSCP gap assessments, identified weaknesses, and advised on remediation strategies to mitigate potential risks.
- Test automated application controls and evaluate system configurations to ensure accuracy, completeness, and integrity of business processes.
- Participated in IT risk assessments and process improvement initiatives, enhancing audit quality and efficiency across multiple engagements.
- Conduct follow-up reviews to verify closure of prior audit findings.
- Coach and supervise a team of 5 associates on digital audits and IT audit methodologies.
Senior IT Auditor
KPMG Southern Africa
Maputo
10.2021 - 04.2023
- Reviewed compliance with internal policies and regulatory requirements, ensuring adherence to industry best practices.
- Assessed cybersecurity practices and incident response readiness to enhance business continuity frameworks.
- Performed IT audits covering access controls, change management, program development, and IT operations across various industries including telecoms, insurance, and public sector organizations.
- Utilised data analytics tools to identify anomalies and control gaps, improving overall process efficiency.
- Reviewed SOC reports and evaluated third-party service provider risks.
- Supported external audits and regulatory inspections by providing IT control insights and documentation.
Senior IT Auditor
BDO Chartered Accountants
01.2018 - 09.2021
- Led end-to-end IT audits covering infrastructure, applications, cybersecurity, cloud-hosted systems, and data governance for clients across multiple sectors including manufacturing, retail, financial services, and government.
- Evaluated IT controls aligning with ISO 27001, COBIT, and organisational policies to enhance compliance.
- Conducted risk assessments to identify vulnerabilities and recommend mitigation strategies.
- Monitored remediation plans, ensuring timely implementation of corrective actions to address identified vulnerabilities.
- Collaborated with management to strengthen IT governance, resulting in improved control maturity across the organisation.
- Prepared detailed audit reports and presented findings to senior stakeholders.
Education
Bachelor of Science - Information Systems
Midlands State University
Zimbabwe01-2018
Skills
- IT audit and assurance
- SOC 1 and SOC 2 review
- IT controls testing
- Application/ Automated controls testing
- Cybersecurity audits
- Risk assessment and management
- Regulatory compliance
- IT governance and process improvement
- Data analytics (IDEA, Power BI, Alteryx)
- ERP systems review
- Business continuity planning
- Report writing
Certification
- Certified Information Systems Auditor (CISA), Completed
- Certified Information Security Manager (CISM), In Progress
Accomplishments
- Reduced IT control gaps by 30% through targeted audit recommendations and follow-up reviews.
- Led multiple IT audits across three countries with zero regulatory findings.
- Strengthened cybersecurity readiness by enhancing incident response and business continuity processes.
- Improved third-party risk visibility through enhanced SOC report review procedures.
References
Available upon request.
Timeline
Senior IT Auditor 2 (Assistant Manager)
PwC Middle East
05.2023 - Current
Senior IT Auditor
KPMG Southern Africa
10.2021 - 04.2023
Senior IT Auditor
BDO Chartered Accountants
01.2018 - 09.2021
Bachelor of Science - Information Systems
Midlands State University