IT Systems Audit Manager / Audit SME

Led HITRUST assessments covering 500+ controls across 19 domains, supporting successful certification with minimal corrective action requirements. Maintained certifications and registrations including FDA, SOC 2, HITRUST, and ISO 27001 control environments. Identified compliance gaps through enterprise risk assessments and coordinated remediation efforts with assessors and security teams. Managed HITRUST assessment activities, control mapping, vulnerability reviews, and remediation tracking. Developed and enforced IT policies, standards, and procedures aligned to HIPAA and HITRUST CSF. Maintained vendor risk inventory and performed security and privacy assessments on new vendors. Ensured contracts included appropriate security, privacy, and BAA terms. Provided project leadership and served as primary contact for client communications.

Conducted risk-based reviews of cybersecurity, access management, incident response, business continuity, and third-party risk controls. Performed HITRUST readiness assessments, gap analyses, and remediation planning. Developed security policies, compliance documentation, and control reviews aligned with HITRUST and NIST standards. Led audit and advisory engagements and oversaw project execution.

Performed cybersecurity assessments aligned with CMMC, HIPAA, NIST RMF, and enterprise governance frameworks. Developed remediation plans and compliance recommendations supporting risk reduction and cybersecurity resilience. Supported government audit projects using FAR and federal standards.

Performed HIPAA, HITRUST, and GLBA assessments while developing governance frameworks and audit-ready compliance documentation. Delivered risk assessments, remediation strategies, and executive reporting. Provided technical direction and leadership on audit advisory projects.

Developed governance metrics, key risk indicators, and compliance reporting frameworks supporting enterprise security oversight. Executed third-party risk reviews, vendor assessments, and audit preparation activities.

Supported HITRUST certification initiatives by implementing the HITRUST Common Security Framework for healthcare clients. Led governance, risk, compliance, and vulnerability assessment activities supporting regulatory requirements.

Conducted IT SOX reviews, cybersecurity assessments, and IT operational risk analyses while reporting findings to management. Developed security metrics, facilitated monthly security review meetings, and supported executive compliance reporting.

Performed SSAE16/18, SOC 1, SOC 2, SOC 3, PCI DSS, ISO 27001/27002, and regulatory compliance audits across diverse client environments. Increased firm revenue through advisory service expansion and strong client relationship management. Led audit engagements and ensured completion of project deliverables in accordance with client and regulatory requirements.