As the Director of Information Security at Ardent Health Services, I was responsible for the security of all IT systems at Ardent’s 14 hospitals and various patient care centers across three geographic markets. I led all information security and risk management efforts for HIPAA, Meaningful Use, and the Model Audit Rule. Additionally, my team was responsible for identity and access management, network security monitoring, threat & vulnerability management, information security awareness, and a variety of other IT security related applications across the organization.

Responsible for various projects related to Information Security and IT Auditing across the Ardent Enterprise. Responsibilities include conducting audits to ensure compliance with federal, state, and local laws/regulations (i.e. Model Audit Rule, HIPAA, etc.) and to serve as project manager for various security related IT projects.

As a senior consultant for Deloitte, I helped my clients identify, develop and test internal control policies and procedures within business process and information technology environments. These services came as part of an internal audit or audit of financial statements or as individual projects resulting from major organizational changes, implementation of new technologies or reliance on third-party service providers.

Worked extensively with end users to develop standard budget templates to facilitate a streamlined and more efficient budget to actual comparison.

Developed several standardized audit programs designed to ensure the proper operation of IT security, firewalls, and routers.