Hi, I’m Noah. I audit the code behind the numbers.

Featured project

Audit automation workflow

An AI-driven workflow I designed to take the repetitive parts out of audit prep. It handles evidence intake, classifies controls, and gets walkthroughs ready before anyone opens a meeting invite.

The result is more consistent documentation, faster turnaround, and conclusions that hold up in review.

1. IT Risk & Assurance Staff, Technology Risk

   July 2025 – present

   Ernst & Young (EY), Bentonville, AR

   The only onshore staff on the application-controls team for a Fortune 1 retail enterprise. I'm trusted with the controls that are custom-built, high-risk and material to the financials.

   • Tested: Test design and operating effectiveness of 100+ automated controls across inventory, order-management and financial-reporting systems, reading the source code and configuration (Java, Python, SQL) in SAP and custom platforms.
   • Traced to source: Confirm the exact production code version in scope before testing, so conclusions reflect what's actually deployed.
   • Reconciled: Trace data end to end through cloud data platforms, message queues, orchestration and relational databases to prove system reports (IPE) are complete and accurate, down to record counts and transaction detail.
   • Tested: Evaluate interface and error-handling controls (message validation, schema and total checks, monitoring and alerting) to confirm failed transactions get caught, retried and resolved.
   • Traced to source: Lead walkthroughs with developers and control owners, then write the narratives, IPE memos, benchmarking memos and PBC requests that turn technical logic into clear conclusions.
   • Reconciled: Spot and escalate evidence gaps and deficiencies, working with client IT, internal audit and offshore teams. I've served several clients at once, on teams from a few people to 50+.

2. Technology Risk Intern

   June – August 2024

   Ernst & Young (EY), Bentonville, AR

   My first look at ITGC and application-controls work on a large enterprise engagement, the summer before senior year.

   • Tested: Supported control testing and walkthrough documentation alongside the ITGC and application-controls team.
   • Reconciled: Collected evidence, benchmarked prior-year controls, and tied system reports back to source data under senior review.
   • Traced to source: Earned a full-time return offer and joined the same engagement after graduating.

Toolkit

The systems I test, and what I test them with

Audit and risk

• ITGCs
• SOX 404
• IT application controls
• IT-dependent manual controls
• IPE completeness & accuracy
• Control walkthroughs
• Benchmarking
• Data reconciliation

Before EY, and on the side

School, research and the AI club that got big

• 

  Arkansas AI Foundry

  Co-founder, now strategic advisor

  Helped start a student AI organization at the University of Arkansas and grew it past 100 members with speaker events and workshops. It's now a 501(c)(3), and I advise on AI strategy as an unpaid, independent advisor.

• DRIVER framework research

  Finance technology research assistant

  Worked with Professor Xinde Zhang applying Python and AI to financial modeling with the DRIVER framework, and helped graduate students through their coding problems.

• University of Arkansas

  Sam M. Walton College of Business, May 2025

  B.S. in Business Administration in Financial Analytics, with a minor in Business Information Systems.

• CISA

  In progress

  Studying for the Certified Information Systems Auditor exam to back the day job with the credential.