Looks like you have JavaScript disabled. For the full Twine experience, you will need to re-enable it.

Hi, I’m Claude Beauregard, Jr.—a Senior IT Risk and Security Executive with 27+ years delivering enterprise-wide risk management, compliance, and cybersecurity programs for healthcare, insurance, and technology organizations. I’m a Big 4-trained professional from Deloitte & Touche Enterprise Risk Services who has built risk programs that protect multi‑billion‑dollar assets while enabling secure digital transformation through AI. I bridge technical security architecture with C-suite strategy to turn risk into a competitive advantage. I’ve led AI governance initiatives, third‑party risk programs, and regulatory compliance efforts (HIPAA, SOC 2, NIST 800‑53, PCI‑DSS) and am passionate about translating risk insights into business value and trusted AI systems.…Hi, I’m Claude Beauregard, Jr.—a Senior IT Risk and Security Executive with 27+ years delivering enterprise-wide risk management, compliance, and cybersecurity programs for healthcare, insurance, and technology organizations. I’m a Big 4-trained professional from Deloitte & Touche Enterprise Risk Services who has built risk programs that protect multi‑billion‑dollar assets while enabling secure digital transformation through AI. I bridge technical security architecture with C-suite strategy to turn risk into a competitive advantage. I’ve led AI governance initiatives, third‑party risk programs, and regulatory compliance efforts (HIPAA, SOC 2, NIST 800‑53, PCI‑DSS) and am passionate about translating risk insights into business value and trusted AI systems.

Claude Beauregard, Jr.

AI Ethics Consultant, AI Strategy Consultant





Hi, I’m Claude Beauregard, Jr.—a Senior IT Risk and Security Executive with 27+ years delivering enterprise-wide risk management, compliance, and cybersecurity programs for healthcare, insurance, and technology organizations. I’m a Big 4-trained professional from Deloitte & Touche Enterprise Risk Services who has built risk programs that protect multi‑billion‑dollar assets while enabling secure digital transformation through AI. I bridge technical security architecture with C-suite strategy to turn risk into a competitive advantage. I’ve led AI governance initiatives, third‑party risk programs, and regulatory compliance efforts (HIPAA, SOC 2, NIST 800‑53, PCI‑DSS) and am passionate about translating risk insights into business value and trusted AI systems.…Hi, I’m Claude Beauregard, Jr.—a Senior IT Risk and Security Executive with 27+ years delivering enterprise-wide risk management, compliance, and cybersecurity programs for healthcare, insurance, and technology organizations. I’m a Big 4-trained professional from Deloitte & Touche Enterprise Risk Services who has built risk programs that protect multi‑billion‑dollar assets while enabling secure digital transformation through AI. I bridge technical security architecture with C-suite strategy to turn risk into a competitive advantage. I’ve led AI governance initiatives, third‑party risk programs, and regulatory compliance efforts (HIPAA, SOC 2, NIST 800‑53, PCI‑DSS) and am passionate about translating risk insights into business value and trusted AI systems.

Available to hire

Hi, I’m Claude Beauregard, Jr.—a Senior IT Risk and Security Executive with 27+ years delivering enterprise-wide risk management, compliance, and cybersecurity programs for healthcare, insurance, and technology organizations. I’m a Big 4-trained professional from Deloitte & Touche Enterprise Risk Services who has built risk programs that protect multi‑billion‑dollar assets while enabling secure digital transformation through AI.

I bridge technical security architecture with C-suite strategy to turn risk into a competitive advantage. I’ve led AI governance initiatives, third‑party risk programs, and regulatory compliance efforts (HIPAA, SOC 2, NIST 800‑53, PCI‑DSS) and am passionate about translating risk insights into business value and trusted AI systems.

Language

English

Fluent

Work Experience

SENIOR IT SECURITY RISK ANALYST at Hanover Insurance Group

March 13, 2023 - Present

• Member of Generative AI Governance Subcommittee reporting to CIO; established the company's first AI risk management framework encompassing model development, deployment, monitoring, and vendor assessment, adopted as enterprise standard, and presented to Board Risk Committee • Collaborated with procurement and legal teams to integrate security requirements into vendor contracts, preventing 15+ high-risk vendor relationships • Delivered executive presentations to business unit leaders and Board committees on third-party risk posture and AI governance strategy • Tracked corrective action plans to closure, ensuring consistent remediation within agreed timelines and accountability across business units

Cyber/GRC Privacy Auditor & Risk Specialist at Henry Ford Health System

January 1, 2019 - March 1, 2023

Directed PHI risk assessment program across a 5-hospital enterprise; evaluated 100+ clinical and administrative systems annually; drove remediation strategies reducing high-risk findings. Managed enterprise risk register with 300+ active risks; conducted risk assessments for 40+ infrastructure modernization projects totaling $150M+ in capex; developed Joint Venture risk framework adopted across 8 partnerships and served as SME on 10+ M&A due diligence reviews. Contributed to medical device security efforts for 500+ connected devices and performed HIPAA/NIST 800-53 gap analyses, closing 80+ gaps in 18 months.

Security Engineer (Contract – Dignity Health) at AP Professionals

July 1, 2014 - September 1, 2018

Managed internal risk assessments for 200+ biomedical devices and supporting infrastructure; provided pre-implementation risk advisory for 25+ major technology initiatives, including a $50M+ EMR implementation ensuring security architecture met HIPAA requirements. Collaborated with the GRC committee to revise 40+ security policies aligned with the NIST Cybersecurity Framework. Led security awareness campaigns reaching 10,000+ employees, significantly improving security posture.

Lead IT Compliance Auditor at Truven Health Analytics (Acquired by IBM Watson Health)

June 1, 2011 - August 1, 2018

Led Health Information Exchange (HIE) to first-time EHNAC accreditation, passing all 85 audit criteria. Managed SOC 2 Type II and NIST 800-53 compliance audits for 50+ client-facing applications processing 500M+ patient records annually. Standardized audit cycles with automated control testing and evidence collection; developed a standardized IT risk assessment framework deployed across 50+ client applications; coordinated cross-functional audit preparation across 15+ business units.