Dheeraj K.-Senior Cybersecurity Consultant
Check rate
Experience
Senior IT Audit Consultant
Confidential Financial Services Client
System Transformation Audit
Supporting a project-related IT audit of a system transformation within the financial services sector, focusing on controls associated with different types of system migrations. The work involves reviewing migration-specific documentation and supporting evidence to assess whether the controls for each migration type are adequately evidenced and sufficient to address the associated migration risks. Particular emphasis is placed on the adequacy of control measures, the reliability of supporting evidence, and safeguards relating to data integrity and migration-related risks.
Team Size: 2 project managers, 1 delivery manager, 2 senior consultants
Tasks & Responsibilities:
- Reviewing documentation and supporting evidence for different types of system migrations.
- Assessing migration-specific control procedures and evaluating whether the controls are appropriate and sufficient to address the associated risks.
- Evaluating the adequacy and completeness of evidence provided to demonstrate that migration controls have been performed as intended.
- Reviewing relevant control measures designed to safeguard data completeness, accuracy, and integrity during migration, where applicable.
- Identifying potential control gaps, insufficient evidence, and areas requiring further clarification or additional audit procedures.
- Assessing whether the documented migration approach and associated controls adequately address the risks arising from the respective migration type.
- Coordinating with relevant project stakeholders to clarify migration procedures, obtain supporting documentation, and follow up on open audit questions.
- Documenting audit procedures, evidence reviewed, control assessments, and observations in accordance with the engagement's audit methodology.
Audit Standards, Methodologies and Regulatory Frameworks: Migration Controls Assessment, Migration Risk Assessment, Evidence Review, Control Testing, IT Audit Documentation.
Areas of Expertise: System Transformation, System Migration Controls, Migration Risk Assessment, Control Evaluation, Evidence Assessment.
Main Results & Achievements:
- Contributing to the assessment of migration controls and the identification of potential control gaps.
- Identifying evidence deficiencies and areas requiring further clarification.
- Documenting audit observations and supporting the evaluation of migration-related risks and control effectiveness.
Senior IT Audit Consultant
Confidential Financial Services Client
System Migration Audit
Conducted an IT audit focused on system migration within the financial services sector, assessing migration-related risks, controls and supporting evidence to evaluate whether the migration process was adequately controlled.
Team Size: 1 project manager, 1 delivery manager, 2 consultants
Tasks & Responsibilities:
- Reviewed migration documentation and supporting evidence relating to the system migration.
- Assessed migration controls and evaluated whether they were appropriately designed and sufficient to address the risks associated with the migration.
- Reviewed evidence relating to data completeness, accuracy and reconciliation, where applicable.
- Identified and documented migration-related risks, control weaknesses and evidence gaps.
- Documented audit procedures, findings and recommendations and communicated relevant observations to stakeholders.
Audit Standards, Methodologies and Regulatory Frameworks: System Migration Audit, Migration Risk Assessment, Migration Controls Assessment, Evidence Review, IT Audit Documentation.
Areas of Expertise: System Migration, Migration Controls, Migration Risk Assessment, Data Completeness and Accuracy, Reconciliation Controls.
Main Results & Achievements:
- Identified and documented migration risks, control weaknesses and evidence gaps.
- Contributed to the assessment of the adequacy of migration controls and the documentation of audit findings.
IT Audit Consultant / Senior IT Audit Consultant
Confidential Client in the Financial Services Industry
IT Audit and IT General Controls Assessment
Conducted IT audit activities for a financial services client, focusing on the assessment of IT General Controls (ITGC) and the effectiveness of key IT processes and security-related controls within a regulated environment.
Team Size: 1 project manager, 1 delivery manager, 1 senior consultant, 4 consultants
Tasks & Responsibilities:
- Conducted IT audits in accordance with applicable audit standards and methodologies, including IDW PS 330, IDW RS FAIT 1 and ISA 315.
- Performed process walkthroughs and reviewed supporting documentation to understand the IT control environment.
- Tested user access provisioning, modification and removal, including role assignments, privileged access and segregation of duties.
- Assessed change management controls, including review of change testing, approvals and evidence of implementation.
- Reviewed IT operations controls relating to incident management, backup and recovery, and scheduled job processing.
- Evaluated control design and operating effectiveness and documented identified control deficiencies.
- Prepared audit workpapers and communicated findings and recommendations to relevant stakeholders.
Technologies: Excel, Power BI, Jira, Confluence.
Audit Standards, Methodologies and Regulatory Frameworks: IDW PS 330, IDW RS FAIT 1, ISA 315, DORA, BAIT, VAIT, MaRisk.
Areas of Expertise: IT General Controls (ITGC), ICT Risk Management, IAM, PAM, Segregation of Duties (SoD), Change Management, Incident Management, Backup & Recovery, Control Testing.
Main Results & Achievements:
- Identified and documented IT control deficiencies and assessed their potential impact on the control environment.
- Provided actionable recommendations to support remediation and improve control effectiveness.
- Produced structured audit documentation and communicated findings to client stakeholders.
IT Audit Consultant
Confidential Financial Services Client
IT Application Controls Testing
Assessed automated IT application controls for a financial services client, focusing on selected application controls designed to support the completeness, accuracy and integrity of data processing.
Team Size: 1 project manager, 2 consultants
Tasks & Responsibilities:
- Reviewed application control descriptions and obtained an understanding of the relevant business and system processes.
- Tested automated input validations and system-based calculations.
- Examined interface controls and reconciliations between systems, where applicable.
- Reviewed supporting evidence and documented control testing procedures and results.
- Investigated exceptions and discussed relevant observations with the engagement team and client stakeholders.
- Documented control weaknesses and contributed to audit conclusions and reporting.
Audit Standards, Methodologies and Regulatory Frameworks: IT Application Controls (ITAC), Automated Control Testing, Input Validation, System Calculations, Interface Controls, Reconciliations, Audit Documentation.
Areas of Expertise: IT Application Controls, Automated Controls, Data Integrity, Application-level Control Assessment, Control Testing.
Main Results & Achievements:
- Documented the results of automated control testing and identified exceptions where applicable.
- Supported assessment of data integrity and the reliability of application-level controls.
- Contributed to audit conclusions and recommendations based on the testing performed.
IT Audit Consultant / Senior IT Audit Consultant
Confidential Financial Services Client
Project-related IT Audit
Conducted recurring project-related IT audit activities in accordance with IDW PS 850 for system implementations and migrations within the financial services sector. Audit activities are performed in phases aligned with individual go-live milestones and focus on project governance, functional and technical concepts, test strategy and execution, defect management, data migration controls, and the internal control environment of target systems. Activities include reviewing project documentation, assessing project risks, and evaluating outstanding issues and relevant controls ahead of individual go-live milestones.
Team Size: 1 project manager, 1 delivery manager, 1 consultant
Tasks & Responsibilities:
- Assessed project governance structures, responsibilities, decision-making processes and supporting project documentation.
- Reviewed the project test strategy, test planning, test execution and documentation of test results to assess whether testing activities were appropriately defined, performed and evidenced.
- Evaluated test management processes, including test coverage, test progress, identification of issues and the handling of failed or incomplete test cases.
- Reviewed defect management processes, including defect logging, severity classification, prioritisation, assignment, resolution status, retesting and escalation of outstanding defects.
- Analysed open defects and unresolved issues to understand their potential impact on project risks, system readiness and the planned go-live.
- Coordinated with relevant project stakeholders and workstreams to obtain supporting evidence, clarify open points, follow up on outstanding issues and discuss identified risks.
- Assessed project documentation and go-live preparation activities, including outstanding issues, relevant approvals and readiness-related evidence.
- Reviewed data migration activities and controls, including migration documentation, reconciliations and evidence supporting data completeness and accuracy, where applicable.
- Conducted stakeholder discussions and process walkthroughs to understand project activities, identify control gaps and assess whether relevant risks were appropriately addressed.
- Documented audit procedures, testing results, observations and findings in the electronic audit work programme in accordance with internal quality and documentation standards.
- Prepared audit findings and presentations and communicated identified risks, control weaknesses and recommendations to client stakeholders.
Technologies: Excel, Power BI, Jira, Confluence.
Audit Standards, Methodologies and Regulatory Frameworks: IDW PS 850, Project Governance Review, Test Management Review, Defect Management Assessment, Migration Controls Assessment, Audit Documentation.
Areas of Expertise: Project-related IT Audit, System Implementation, Project Risk Assessment, Test Management, Defect Management, Data Migration Controls, Go-Live Readiness Assessment.
Main Results & Achievements:
- Provided structured audit insights into project governance, testing, defect management, migration activities and go-live preparation.
- Identified and documented project risks, control weaknesses and outstanding issues requiring further attention.
- Supported transparency over test results, unresolved defects and migration-related risks through structured assessment and documentation.
- Communicated audit findings and recommendations to relevant stakeholders to support follow-up actions.
- Contributed to the assessment of project and system readiness by evaluating relevant controls, supporting evidence and outstanding risks ahead of go-live.
IT Audit Consultant
Confidential Client in the Financial Services Industry
Regulatory Compliance and IT Risk Assessments
Supported regulatory compliance assessments and IT audits for a client in the financial services sector, focusing on IT governance, information security, IT risk management and operational controls in accordance with applicable regulatory requirements, particularly BAIT, VAIT and MaRisk. The work involved reviewing policies, procedures and supporting evidence and assessing the adequacy of established IT controls against regulatory and internal requirements.
Team Size: 1 project manager, 1 delivery manager, 3 consultants
Tasks & Responsibilities:
- Reviewed IT policies, procedures, process descriptions and supporting evidence against applicable requirements under BAIT, VAIT and MaRisk.
- Assessed IT governance structures, responsibilities and control processes within regulated financial services environments.
- Evaluated IT risk management practices and relevant information security and operational controls.
- Reviewed access management, change management, incident management, backup and recovery, and IT operations controls where relevant to the engagement scope.
- Conducted stakeholder discussions and walkthroughs to understand processes, clarify control implementation and obtain audit evidence.
- Identified regulatory gaps, control deficiencies and areas for improvement through evidence-based assessments.
- Documented audit procedures, observations, risks and recommendations in accordance with the engagement methodology.
- Supported the preparation and communication of audit findings and reports to relevant stakeholders.
Audit Standards, Methodologies and Regulatory Frameworks: BAIT, VAIT, MaRisk, IT Risk Assessment, Regulatory Compliance Assessment, IT Control Testing, Stakeholder Interviews, Audit Documentation and Reporting.
Areas of Expertise: Regulatory Compliance, IT Governance, Information Security, IT Risk Management, Operational Controls, Regulatory Gap Assessment.
Main Results & Achievements:
- Supported the assessment of IT controls against applicable regulatory requirements under BAIT, VAIT and MaRisk.
- Identified and documented regulatory gaps, control weaknesses and areas requiring improvement.
- Contributed to the evaluation of IT governance, IT risk management and information security controls.
- Supported the preparation of structured audit findings and recommendations to strengthen the IT control environment.
Penetration Tester
Ernst & Young (EY)
Web Application Testing
Performed manual web application security tests using Burp Suite focusing on OWASP Top 10 vulnerabilities. Conducted network and service scanning using Nmap to identify potential risks. Validated automated vulnerability scans and created brief technical documentation. Supported internal training initiatives in web application security.
Client Description: Ernst & Young (EY) is a global professional services organization providing assurance, consulting, strategy and transactions, and tax services to clients across various industries.
Team Size: 1 project manager, 2 delivery managers, 2 consultants
Tasks & Responsibilities:
- Performed manual web application security testing using Burp Suite and OWASP Top 10-based methods.
- Conducted network and service scanning using Nmap.
- Validated automated vulnerability scan results.
- Documented technical findings and supported internal security training.
Technologies & Methods: Burp Suite, OWASP Top 10, Nmap, Web Application Security Testing, Vulnerability Assessment.
Main Results & Achievements:
- Technical testing documentation.
- Validated vulnerability findings.
- Inputs to security assessment reports.
Ethical Hacker (Internship)
CyberXchange
Web, Android and Vulnerability Assessment Testing
Performed security testing on web applications such as DVWA and bWAPP. Conducted research on current cyberattack methods and threat trends. Tested Android applications like DIVA and worked with vulnerable platforms such as Metasploitable. Created VAPT reports and documented identified vulnerabilities.
Client Description: CyberXchange is a cybersecurity organization focused on ethical hacking, penetration testing and information security services.
Team Size: 1 project manager, 3 consultants
Tasks & Responsibilities:
- Tested web applications using DVWA and bWAPP.
- Conducted security testing of Android applications using DIVA.
- Worked with intentionally vulnerable environments such as Metasploitable.
- Researched attack techniques and documented vulnerabilities.
- Prepared vulnerability assessment and penetration-testing reports.
Technologies & Methods: DVWA, bWAPP, DIVA, Metasploitable, Web Application Security, Android Security Testing, VAPT.
Main Results & Achievements:
- Vulnerability assessment and penetration-testing reports.
- Documented security findings and recommendations.
Penetration Tester
TV5 News / Shreya Broadcasting Pvt. Ltd.
Web Application Security Testing
Performed manual security testing using Burp Suite and analyzed OWASP-relevant vulnerabilities. Conducted regular vulnerability scans using Nmap and Nessus. Validated automated scan results.
Client Description: Shreya Broadcasting Pvt. Ltd. is a media and broadcasting company based in Hyderabad, India, operating TV5 NEWS, a 24-hour Telugu news channel covering news and current affairs.
Team Size: 1 project manager, 1 consultant
Tasks & Responsibilities:
- Performed manual web application testing using Burp Suite and OWASP Top 10-based methods.
- Conducted vulnerability and network scanning using Nmap and Nessus.
- Validated automated scan results and documented technical findings.
Technologies & Methods: Burp Suite, OWASP Top 10, Nmap, Nessus, Web Application Security Testing, Vulnerability Assessment.
Main Results & Achievements:
- Technical vulnerability findings.
- Supporting documentation for security assessment reports.
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Banking and Finance, Media and Entertainment, Professional Services, and Information Technology.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Audit, and Research and Development.
Summary
Dheeraj is a Senior Cybersecurity Consultant specialized in IT audit, IT governance, information security controls and regulatory assessments, primarily in the banking and insurance sectors. His experience includes assessing IT control environments, ICT risks and regulatory requirements, including DORA, BAIT, MaRisk and VAIT. He has worked extensively with IT General Controls (ITGC), identity and access management, segregation of duties, change management, incident management, backup and recovery, and project-related IT audits. His experience also includes IT application controls testing, data analysis using Power BI and audit reporting. He holds ISO/IEC 27001 Lead Auditor and Lead Implementer certifications.
Skills
Technical Knowledge
- Dora
- Bait
- Marisk
- Vait
- Idw Ps 330
- Idw Ps 850
- Isa 315
- Idw Rs Fait 1
- Iso/Iec 27001
- Confluence
- Jira
- Stakeholder Management
- Power Bi
Functional Knowledge
- Identity And Access Management (Iam)
- It Audit And Assurance
- It General Controls (Itgc)
- Regulatory Compliance Assessment
- It Application Controls (Itac)
- It Risk Assessment
- Ict Risk
- It Governance
- Information Security Controls
- Privileged Access Management (Pam)
- Segregation Of Duties (Sod)
- Change Management
- Incident Management
- Project-Related It Audits
- Risk-Based Audit
- Control Testing
- Backup And Recovery
Industry Knowledge
- Banking
- Financial Services
- Insurance
Languages
Education
Osmania University
Bachelor of Engineering · Hyderabad, India
Certifications & licenses
Statistics
Experience
Global experience
Expertise
Qualifications
Frequently asked questions
Have questions? Find more information here.
Dheeraj is based in Munich, Germany.
Dheeraj speaks the following languages: English (Native), Telugu (Native), German (Advanced), Hindi (Intermediate).
Dheeraj has at least 6 years of experience. During this time, Dheeraj has worked in at least 5 different roles and for 5 different companies. The average length of individual experience is 1 year and 7 months. Note that Dheeraj may not have shared all experience and actually has more experience.
Based on recent experience, Dheeraj would be well-suited for roles such as: Senior IT Audit Consultant, IT Audit Consultant / Senior IT Audit Consultant, IT Audit Consultant.
Dheeraj's most recent position is Senior IT Audit Consultant at Confidential Financial Services Client.
In recent years, Dheeraj has worked for Confidential Financial Services Client, Confidential Client in the Financial Services Industry, Ernst & Young (EY), CyberXchange, and TV5 News / Shreya Broadcasting Pvt. Ltd..
Dheeraj is most experienced in industries like Banking and Finance, Media and Entertainment, and Professional Services. Dheeraj also has some experience in Information Technology.
Dheeraj is most experienced in business areas like Information Technology, Audit, and Research and Development.
Dheeraj has recently worked in industries like Banking and Finance, Media and Entertainment, and Professional Services.
Dheeraj has recently worked in business areas like Information Technology, Audit, and Research and Development.
Dheeraj holds a Bachelor from Osmania University.
Dheeraj has 3 certificates. These include: ISO/IEC 27001:2022 – Lead Auditor, ISO/IEC 27001:2022 – Lead Implementer, and Certified Ethical Hacker.
Dheeraj will be available full-time from November 2026.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 3 Nov 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Peter K.
Daniel J.
Federico L.
Nikolaus B.
Markus W.
Alexander S.
Pierre G.
Christian D.
Michael S.
Christian F.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Senior IT Audit Consultant
Diana G.
Henry H.
Michael G.
Björn B.
Volkmar J.
Matthias K.
Frank H.
Jens B.
Norbert E.
Swetlana L.
Nearby freelancers
Professionals working in or nearby Munich, Germany
Mohammed N.
Holger W.
Florian S.
Viaceslav K.
Tony S.
Max R.
Alexander R.
Roland C.
Karen M.
Carl-Friedrich L.
