Aron Stewart

WORK HISTORY

EDUCATION

ABOUT ARON STEWART

IT Audit and Cybersecurity Compliance leader with 6+ years of experience delivering enterprise PCI DSS, ITGC, and IT risk assessments across healthcare, aviation, retail, finance, and telecommunications. I bring both internal and external audit experience, allowing me to assess risk pragmatically while partnering with technology, security, and business leaders to drive meaningful remediation.I specialize in PCI DSS Level 1 environments, including CDE scoping and validation, data flow analysis, segmentation reviews, ROC readiness, SAQs, and AOC certification. I’ve led enterprise IT risk assessments, collaborated directly with QSAs, and supported certification efforts by aligning technical controls with PCI DSS 4.0 intent—not just checklist compliance.Currently, I serve as a Lead Internal IT Auditor at Charter Communications (Spectrum), where I lead end-to-end IT risk assessments as a PCI ISA, support Level 1 certification readiness, and partner with cross-functional teams to remediate complex control gaps. My work has contributed to zero PCI findings across multiple audit cycles, accelerated remediation timelines, and improved audit efficiency through standardized control matrices and evidence frameworks.Previously, as a Cybersecurity Consultant at CliftonLarsonAllen, I executed PCI, SOX, SOC, NIST, and HIPAA assessments for 50+ clients, led CDE scoping and segmentation validations, developed audit test scripts, and translated technical findings into clear business risk for executive stakeholders. Earlier in my career at UAB Medicine, I supported ITGC and PCI assessments in a HIPAA-regulated environment, focusing on access controls, logging, segmentation, and incident investigations.I’m known for strong risk-based judgment, clear executive communication, mentoring junior auditors, and driving remediation outcomes—not just documenting findings.Certifications: CISA | CISM | PCI ISAFrameworks: PCI DSS, SOX, SOC 1/2, NIST, ISO 27001, COSO, HIPAATools: AuditBoard, Archer, ServiceNow, FieldGuide, Splunk, Nessus, Qualys, AWS, Azure, GCP