HIMANSHUPOKHARKAR
Currently
Sr. Associate, IT Audit
Company
Berenberg
Location
London, UK
Selected for the NCSC Innovators Challenge — MSc Information Security cohort
Read Article0+
Years of Experience in IT Audit, GRC & Cybersecurity
Big 4
Deloitte · PwC
CISA
About Me
Risk isn't always where the checklist says it is.
Seven years of IT audits have taught me one thing: the most dangerous risks aren't the ones that fail a control test. They're the ones hiding behind a passed one. I don't just tick boxes. I look for what the boxes miss.
My career has taken me across Big 4 advisory at Deloitte and PwC to in-house at Berenberg, a private bank where audit findings land on desks of people who act on them. Moving from external to internal changed how I think about risk, stakeholder communication, and what good audit work really looks like.
CISA certified. NCSC-accredited MSc from the University of Surrey. Selected for the NCSC Innovator's Challenge. But credentials aside, I'm here to make IT Audit less intimidating and a lot more useful, whether you're three months in or thirteen years deep.
Skills
Areas of expertise
Audit
Security
Frameworks
Leadership
Key Projects
Research & Projects
Evaluating Risk Rating Tools for Vendor Risk Management (TPRM)
Led a research project to enhance Third-Party Risk Management within a live university environment, addressing increasing supply chain risks highlighted by events such as the SolarWinds attack.
Outcome
Improved risk visibility, control assurance, and vendor risk decision-making across the university.
Tools Evaluated
Methodology & Findings
Career History
Professional experience
Berenberg
CurrentLondon, UK
Senior Associate, Internal Audit (IT)
Associate, Internal Audit (IT)
Deloitte
London, UK
Senior Consultant, Cyber Data & Digital
Crossword Cybersecurity
London, UK
Cyber Security Consultant (Internship)
PricewaterhouseCoopers (PwC)
Mumbai, India
Experienced Associate
Associate
Deloitte
Mumbai, India
Senior Risk Analyst
Risk Analyst
Academic Background
Education
MSc Information Security
University of Surrey
- 1Thesis: Evaluating Risk Rating Tools for Vendor Risk Management (TPRM)
- 2Evaluated OneTrust, BitSight, and Microsoft Defender for Cloud Apps against NIST CSF, ISO 27005, and CAIQ
- 3Designed a hybrid risk framework with a weighted scoring model to reduce subjectivity
- 4Selected for the NCSC Innovator's Challenge
BE Electronics & Telecommunication
University of Mumbai
- 1Foundation in systems engineering, hardware, and telecommunications
- 2Technical grounding that directly supports IT infrastructure and application auditing
Credentials
Certifications
Certified Information Systems Auditor (CISA)
Enterprise Cyber Security: Architectural Thinking for Security
Cyber Security
What Leaders Say
Recommendations
“I worked with Himanshu where he consistently demonstrated proficiency in IT Audit and GRC. His understanding of compliance frameworks aided our deliverables effectively. Himanshu is skilled in time management and has strong interpersonal skills, making him a reliable team member.”
Janet F Freeman
IT Audit Director, UK/Europe & APAC
December 2023
“Himanshu had worked with me on few clients with complex IT structure during his stint with PwC. He was one of the most dynamic team members and demonstrated good technical skillset, great communication skills and is adept at managing clients.”
Jithin James
Senior Manager
August 2022
“Himanshu is knowledgeable in his auditing domain including GRC (Governance, Risk & Compliance), which is highly supported by time management and people skill which is much needed. He is a very good resource.”
Durgesh Mankar
CISO at Pluxee India
January 2022
“He is very focused, quick learner and technically sound. Himanshu has great exposure in IT Security audits and ITGCs. He is confident while communicating to clients and team members across hierarchy.”
Emiliana Jockey Crass
Audit Project Leader at PSEG Long Island
July 2021
“The two most important qualities about Himanshu are perseverance and calmness, even at times when deliverables are on the edge. He possesses an excellent understanding of IT Audits and Compliance.”
Trushna Palo Patjoshi
Governance Risk Compliance Consultant
January 2020
“He is a worthy asset to any organization. He is an extremely hard working individual and has accumulated niche skill sets like Risk Management, ITGC, Business Automated Controls and has worked on multiple Cyber Security projects.”
Gaurav Gwalia
Associate Director
September 2019
“I worked with Himanshu where he consistently demonstrated proficiency in IT Audit and GRC. His understanding of compliance frameworks aided our deliverables effectively. Himanshu is skilled in time management and has strong interpersonal skills, making him a reliable team member.”
Janet F Freeman
IT Audit Director, UK/Europe & APAC
December 2023
“Himanshu had worked with me on few clients with complex IT structure during his stint with PwC. He was one of the most dynamic team members and demonstrated good technical skillset, great communication skills and is adept at managing clients.”
Jithin James
Senior Manager
August 2022
“Himanshu is knowledgeable in his auditing domain including GRC (Governance, Risk & Compliance), which is highly supported by time management and people skill which is much needed. He is a very good resource.”
Durgesh Mankar
CISO at Pluxee India
January 2022
“He is very focused, quick learner and technically sound. Himanshu has great exposure in IT Security audits and ITGCs. He is confident while communicating to clients and team members across hierarchy.”
Emiliana Jockey Crass
Audit Project Leader at PSEG Long Island
July 2021
“The two most important qualities about Himanshu are perseverance and calmness, even at times when deliverables are on the edge. He possesses an excellent understanding of IT Audits and Compliance.”
Trushna Palo Patjoshi
Governance Risk Compliance Consultant
January 2020
“He is a worthy asset to any organization. He is an extremely hard working individual and has accumulated niche skill sets like Risk Management, ITGC, Business Automated Controls and has worked on multiple Cyber Security projects.”
Gaurav Gwalia
Associate Director
September 2019
Let's Connect
Whether you're a student, a fellow auditor, or exploring opportunities, I'm happy to chat about IT Audit, GRC, cybersecurity careers, or anything in between.