Michael Lemon

Attributes
Auditor (Position)
ISO 27001:2022 Auditor
+1 216-344-5266
mlemon@maloneynovotny.com
ISO 27001 Lead Auditor, The Knowledge Academy, Certificate 38260, 30 April 2024
Information Security Management System (ISO 27001) Provisional Auditor, Certus Professional Certification, ID 158684366, issued 20 August 2025, valid to 20 August 2026
Certified CSF Practitioner (CCSFP), HITRUST, Practitioner No. 60297, awarded 23 August 2024; annual refreshers completed 17 July 2025 and 23 June 2026
CompTIA Security+ (CE), issued 7 September 2021, valid to 7 September 2027
Bachelor of Science in Health Sciences, Cleveland State University, December 2018, cum laude
Associate of Applied Business, Cybersecurity, Cuyahoga Community College, December 2023, summa cum laude
Certus Professional Certification, registered ISMS (ISO 27001) Provisional Auditor, ID 158684366
HITRUST practitioner community, Practitioner No. 60297
Experiences
Senior IT Audit and Assurance Specialist, Maloney + Novotny LLC, Cleveland, Ohio (2023 to present; Senior from 2025). Participation in over 100 SOC 1, SOC 2, HITRUST (e1, i1, r2), SOX, and ISO 27001 engagements for external clients across software, information services, financial services, professional services, and health sectors. Current responsibilities include managing and reviewing the work of four associates, leading client evidence meetings and walkthroughs, and participating in final QA of reports prior to issue. Technical audit experience spans ITGC review, risk and vulnerability assessment, and configuration assessment across Active Directory, Azure, AWS, SIEM, endpoint, and network security platforms. Observer, ISO/IEC 27001:2022 Stage 1 audit of a medical device manufacturer (2026), as part of ISO 27001 audit training progression. Prior IT operations experience at Amazon (2020 to 2023), including systems administration and team supervision.
Powered by lab Q