Donna Chan

Donna Chan, CISA, CRISC, CFE, CICA, CAMS is the CAO & Head of Internal Audit Practices, Development, and Operations at BlackRock.

Before joining BlackRock, Donna was a VP at Bank of America Merrill Lynch and Internal Controls Manager - Head of Internal Audit at GILT Groupe. Donna was responsible for leading the internal audit efforts across multiple lines of businesses and across the enterprise.

Prior to joining Gilt Groupe, Donna was a Management Consultant with Grant Thornton's governance, risk, and compliance group - Advisory Services - where she served clients of all sizes and across all industries. Her area of expertise is internal controls and audit, IT audit, US SOX 404 compliance, Japanese SOX (J-SOX) compliance, and business process improvement and re-engineering. Her SOX experience includes assisting companies become SOX "ready", as well as mature corporations rationalize SOX efforts and maximize efficiency. She also led the efforts to prepare Japanese corporations for J-SOX compliance. In addition to compliance expertise, she is an experienced project manager and data analyst.

Donna holds a dual MBA in Accounting and Finance as well as a Master of Science in Taxation, both from Fordham University Graduate School of Business. She received her Bachelor of Science in Computer Science with a minor in Mathematics at Wagner College. Donna is a Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Fraud Examiner (CFE), Certified Internal Controls Auditor (CICA), and Certified Anti-Money Laundering Specialist (CAMS).

Donna is an Adjunct Professor at Fordham Graduate School of Business teaching Internal Audit & Controls.

She enjoys running, biking, and following the financial markets closely.

Specialties:

• Business process re-engineering
• Assessment & evaluation of internal controls
• Fraud examination
• PMO
• Organizational restructuring
• Gift card breakage income analysis
• SOP 98-1 (Cap Software)
• Documentation of processes (Business Cycles & IT Controls), identification of gaps, development and management of remediation plans and process/operational improvement strategies
• SOX 404, J-SOX
• IPO readiness & Due Diligence
• Technology Reviews
• SAS 70 / SSAE 16
• OMB A-123