Vemuri Ram Mohan Rao

I'm an IT Audit and Risk & Compliance professional with 4+ years of experience delivering high-impact results through SOC 1, SOC 2, and HITRUST assessments, ITGC testing, and internal audits. Currently working with Deloitte's Audit & Assurance team, I help global organizations strengthen their security posture, meet regulatory standards, and drive continuous compliance across frameworks like AICPA, ISO 27001, GDPR, and SOX.

My expertise spans IT General Controls, automated control testing, risk assessments, and gap analyses. I’ve successfully led end-to-end engagements across industries such as Technology, BFSI, Manufacturing, and Healthcare—collaborating with cross-functional teams to ensure seamless audit execution and actionable recommendations. 

Whether it’s accelerating HITRUST certification readiness, enhancing data protection, or mitigating control gaps, I thrive on solving complex challenges and turning risks into opportunities for improvement. I'm also passionate about keeping up with evolving cybersecurity standards and translating technical controls into business value.

Key Strengths:
✔ SOC & HITRUST Assessments
✔ ITGC
✔ Risk & Compliance Analysis (AICPA, HITRUST, ISO 27001, GDPR)
✔ Internal Audits & Control Design
✔ Client Engagement & Project Delivery

I am a Certified Information Systems Auditor (CISA), CCSK and CCZT and an experienced IT Audit and Risk professional currently working as an Assistant Manager – Audit & Assurance at Deloitte, I bring over four years of hands-on experience in ITGC Testing, SOC 1, SOC 2, ISO 27001 and HITRUST assessments across industries such as Technology, BFSI, Manufacturing, and Healthcare.

My professional journey has equipped me with a strong foundation in IT risk and control testing, regulatory compliance, and internal controls evaluation. At Deloitte, I have successfully led multiple end-to-end audit engagements, managing client communications, scoping exercises, and audit deliverables with a consistent track record of on-time, high-quality delivery.

Highlights of my qualifications include:
• ISO 27001, SOC & HITRUST Assessments: Led complex ISO 27001, SOC 1, SOC 2, and HITRUST certification engagements, ensuring full compliance with ISO, AICPA and HITRUST CSF standards.
• ITGC & Automated Controls Testing: Conducted in-depth testing of IT General Controls and Automated Controls across ERP and in-house applications, strengthening system security and reliability.
• Internal Audits & Gap Assessments: Delivered strategic gap assessments and internal audits aligned with AICPA, HITRUST and GDPR standards, providing actionable insights and remediation plans.
• Risk Analysis & Compliance: Assessed IT risks and regulatory compliance issues, developing mitigation strategies to address key vulnerabilities.
• Client Engagement: Effectively collaborated with cross-functional teams and international clients, contributing to enhanced audit accuracy and overall engagement success.
 

I have completed Post Graduate Diploma in Management in Financial Services and Business Analytics