Zachary Porter , CISA

Zach is a senior manager in the Information Systems and Risk Assurance practice at BNN. He is a Certified Information Systems Auditor (CISA) and has extensive experience with SOC 1 and SOC 2 examinations, IT Sarbanes-Oxley (SOX) testing, outsourced internal audit, and technology risk and controls. He works closely with clients to understand their environments, navigate evolving risks and compliance requirements, and strengthen the controls that support their organizations. Zach serves organizations across a variety of industries, including financial services, healthcare, and technology.

When it comes to SOC examinations, Zach is hands-on throughout the entire process, from understanding an organization’s services and control environments to navigating changes in technology, risk, and reporting requirements. His approach prioritizes practicality and teamwork to help clients build a SOC program that continues to meet the needs of their customers and other stakeholders.

Zach works closely with clients to navigate technology, risk, and compliance requirements. He approaches each engagement as a collaborative partnership, taking the time to understand clients’ organizations, challenges, and goals. Clients can expect responsive and clear communication, practical perspective and guidance, and a trusted advisor focused on building strong relationships and delivering meaningful value.

Zach enjoys problem-solving and building lasting relationships as part of his work. He values learning and growth and regularly finds opportunities to develop his skills and offerings to better serve clients.

Zach joined the firm in 2015 after beginning his career as a mutual fund accountant at a third-party fund administrator. He is an Honors College graduate of the University of Maine, where he earned a bachelor’s degree in business administration, summa cum laude, with a concentration in finance. He has also completed AICPA certificate programs in Data Analytics Core Concepts, Fundamentals of ESG, and Advanced SOC for Service Organizations.