Brent Hedges

About Brent Hedges

IT Audit Leader with nearly two decades of experience overseeing comprehensive audit programs across diverse information technology environments. Expertise in risk assessment, internal control evaluation, and IT compliance, including physical and logical security, disaster recovery, and systems development life cycles. Proven ability to develop and execute strategic audit plans, lead high-performing teams, and collaborate with executive leadership to drive audit excellence and enhance the control environment.Known for my strategic approach to audit execution, I work closely with senior leadership to identify emerging risks, negotiate control recommendations, and ensure consistent follow-up on corrective actions. As a champion of continuous improvement, I foster a culture of integrity, collaboration, and respect. My experience spans complex systems, including information security, networking, and operating systems (Windows, Linux), with a deep understanding of compliance frameworks (HIPAA) and IT best practices. Strong communicator with a track record of building cross-functional relationships and presenting audit results to senior leadership.Certified Information Systems Auditor (CISA) with a passion for leading teams and developing the next generation of audit professionals.

Experience

1. Associate Auditor (IT Audit Director)

   University Hospitals

   Aug 2023 — Present · Shaker Heights, OH, US

   Participate in risk assessment activities to develop yearly internal audit plan- Information Security subject matter expert performing audits over security activities including identity management, network security, workstation/mobile device/network encryption, Data Loss Prevention (DLP), vulnerability scanning/remediation activities, Disaster Recovery, and HIPAA Security Rule- Plan, perform and manage 12 annual HIPAA Security Risk Analyses of ambulatory and inpatient Electronic Health Record (EHR) systems using National Institute of Standards and Technology (NIST) standards- Serve as Audit Manager reviewing Auditor-In-Charge’s work for quality and completeness while providing constructive feedback- Additional audits performed include medication management in inpatient and outpatient settings, physical security, and information technology operations

Education

• University of Phoenix

  Master of Science, Computer Information Systems

  2004 — 2006

• Purdue University

  Bachelor of Science, Management

  1995 — 2000

Skills

• Change Management
• Internal Audit
• Active Directory
• Information Security
• Analysis
• Cobit
• Business Process Management
• Information Security Management
• Business Requirements
• Auditing
• Information Technology
• Cisa
• Coso
• Risk Assessment
• Knowledge Management
• Sarbanes-Oxley Act
• Hipaa
• IT Audit
• Business Analysis
• Requirements Analysis
• U.s. Health Insurance Portability and Accountability Act (Hipaa)
• Program Management
• Software Project Management
• Security Audits
• Requirements Gathering
• Security
• Management
• Project Management
• Systems Analysis
• Governance
• Business Process Improvement
• Disaster Recovery
• Information Security Awareness
• Quality Assurance
• Information Security Governance
• Data Privacy
• Business Process
• Access
• Computer Security
• Business Intelligence