Christopher McAlpine
IT Auditor | IT GRC Analyst | (open to relocate)
Hire this person
Send a job offer directly to this candidate
About
IT Audit and Cybersecurity professional with 16+ years of experience in healthcare compliance/HIPAA, finance, and health information services. Proven track record reducing policy violations by 30% and unauthorized access by 15% through strategic risk assessments and internal controls. Certified in CISA and Security+, with an M.Sc. in Information Management and ISACA training in NIST, ISO 27001, and COBIT frameworks.
Adept at aligning GRC practices with business goals to strengthen audit readiness and regulatory compliance.
Experience
Compliance Analyst | UW Medicine, Seattle, WA
Sep 2007 – Aug 2012
- Conducted HIPAA compliance audits and workforce access reviews, reducing unauthorized access incidents by 15%.
- Designed and implemented audit plans, achieving a 95% departmental compliance rate.
- Investigated security policy violations using NIST controls, lowering medical identity theft risk by 20%.
- Delivered training on compliance and data security, improving adherence rates by 25%.
- Developed audit strategies that reduced policy violations by 30%.
Sep 2004 – Sep 2007
Financial Service Specialist | UW Medicine, Seattle, WA
Sep 1997 – Sep 2004
Health Information Office Assistant | UW Medicine, Seattle, WA
Mar 1996 – Sep 1997
Education
Education
- MS - Information Management | Arizona State University, W. P. Carey School of Business | 2017
- BS - Business Information Systems | University of Phoenix | 2001
- Business Analyst Program | Edmonds College | 2016
- Cybersecurity Specialist Program | Edmonds College | 2021
- Cogent Cyber Range | Penetration Testing & Vulnerability Labs | 2024
- Certified Information Systems Auditor (CISA), Expires Dec 2026
- CompTIA Security+ ce, Expires Jun 2028
- CompTIA A+, Lifetime
