About

Karan Merchant is a highly skilled IT professional with over 6 years of experience in information security, risk and compliance consulting. He is currently working as a Senior Consultant at EY, where he specializes in IT Risk Assurance and IT Audits. Karan has a proven track record of delivering high-quality services to clients across various industries, including BFSI, healthcare, and manufacturing. In his current role, Karan is responsible for managing software assets for State Street Global Advisor independently. He also assists with the procurement and tracking of software and has experience with License Management Solutions such as I-Central based on Service Now. Karan has contributed to improving the process for tracking software along with the leadership team. He has also executed Third Party Risk Management for a client in BFSI sector including 60+ third parties. Karan has extensive experience in IT General Controls Testing, including domains such as Change Management, Backup & restoration, Business continuity management, Incident management, Asset Management, Network Security, Logical Access Management, Human Resource Security, Physical security, Third party risk management, Risk Management, Information Security Organization. He has also prepared the Risk Control Matrix for a client in BFSI sector involving control testing on Access Management, Logical and Database Controls. Karan has reviewed Statement on Standards for Attestation Engagements (SSAE) No. 16 and mapped it to SOx controls. Karan holds an MBA-Tech degree in Business Intelligence and Analytics from Narsee Monjee Institute of Management Studies (NMIMS). He also has a High School degree from Mahrshi Dayanand College of Science, Arts & Commerce and Fellowship School. Karan has knowledge about COBIT, ITIL as pursuing CISA. He is well-versed in Software Asset Management, testing and documentation for ITGC controls, mapping SSAE reports. He also has knowledge of HIPAA, SOX, SAS 16, GDPR and an overview of secure SDLC. Karan has experience in Business Intelligence and Analytics using software like SAS, R, Talend, etc. Karan is a Certified Information Systems Auditor (CISA) and has a passion for staying up-to-date with the latest technologies and trends in the industry. He is a highly motivated, detail-oriented, and results-driven professional who is committed to delivering exceptional services to clients.