Evan Chen

Executed IT Internal audits, SOX 404 compliance audits, Cybersecurity audits across banking, financial services, retail, and healthcare industries, developing deep expertise in governance, risk management, and internal control frameworks. Integrated generative AI tools into audit and compliance workflows to streamline control testing, synthesize policy and system documentation, and analyze structured datasets for risk indicators, improving efficiency while ensuring adherence to internal governance and validation protocols. Served as engagement lead for multiple audit workstreams, assigning responsibilities, and guiding team members through fieldwork to ensure timely and high-quality delivery.

Risk Advisory Senior Associate - Grant Thornton Advisors LLC - New York, NY

(2023-07)

• Executed IT Internal audits, SOX 404 compliance audits, Cybersecurity audits across banking, financial services, retail, and healthcare industries, developing deep expertise in governance, risk management, and internal control frameworks.
• Integrated generative AI tools into audit and compliance workflows to streamline control testing, synthesize policy and system documentation, and analyze structured datasets for risk indicators, improving efficiency while ensuring adherence to internal governance and validation protocols.
• Served as engagement lead for multiple audit workstreams, assigning responsibilities, and guiding team members through fieldwork to ensure timely and high-quality delivery.
• Led testing efforts for IT General Controls (ITGCs), Logical Access, Computer Operations, Change Management, and IT Security, evaluating control design and operating effectiveness and identifying improvement opportunities.
• Applied SOX methodology in alignment with PCAOB standards, NYDFS 23 NYCRR Part 500, and NIST CSF 2.0 requirements to assess regulatory compliance and control effectiveness.
• Leveraged risk and control frameworks (NIST, COBIT, COSO) to support IT audits, risk assessments, and control mapping across key technology domains.
• Managed ongoing client communications, including status updates, follow-ups on evidence requests, and remediation tracking, fostering strong stakeholder relationships and minimizing delays.
• Coordinated and attended walkthrough sessions, collaborating with process owners to validate control design and ensure alignment with audit objectives.
• Performed initial reviews of junior auditors' workpapers, providing technical guidance, coaching, and real-time feedback to strengthen documentation quality and ensure audit readiness prior to manager review.
• Communicated audit findings, root cause analyses, and actionable remediation recommendations to management, supporting risk mitigation and continuous improvement initiatives.
• Executed issue validations to confirm the implementation of corrective actions and ensure timely closure of identified deficiencies.

Business Technology Consultant Intern - Surge Business Development - State College, PA

(2022-05 - 2022-07)

• Led a team of 4 to develop a mobile study app prototype to help users prepare for PMP certifications by using Figma.
• Formulated the study app's MVP and conducted 2 focus group questionings to identify potential areas of opportunities for process innovation.
• Conducted 1 email marketing campaign for a digital loan company by using CRM platforms such as HubSpot, Mailchimp, and Campaign Monitor to test and collect data on click/open rates.
• Completed 2 market research for Penn State NIL Collective to promote NIL to alumni to raise a goal of ~$1,000,000.
• Developed and redesigned 2 websites to enhance the small businesses' brand visibility and recognition by using WordPress.
• Managed social media marketing projects through Asana/Microsoft Teams and coordinated 4 weekly small business client meetings.
• Supported philanthropic efforts and focused on diversity, equity, and inclusion through 2 outreach programs.

B.S. - Information Sciences and Technology - Pennsylvania State University (2023-05) State College, PA