Heather Bearfield, CISA, CISM, CRISC

Principal, MARCUM LLP

bearfield heather 2013Heather B. Bearfield is a Principal in the Firm’s Boston office and serves as the IT Risk and Assurance Services Practice Group Leader. She is also a member of its National Alternative Investment, Healthcare and Financial Services Industry Groups. Ms. Bearfield has extensive experience with SOC engagements, internal and external audits, application reviews, internal and external vulnerability assessments, wireless assessments and penetration testing.

Ms. Bearfield’s main focus has been around data security and CyberSecurity. Engagements include vulnerability assessments, penetration testing, wireless assessments and social engineering.

Ms. Bearfield has comprehensive experience in multiple aspects of Risk Management across business operations including regulatory compliance. She executes compliance engagements according to various regulations including SOX, MA 201 CMR 17.00 (Data Security), HIPAA Privacy, HIPAA Security, Meaningful Use, Dodd Frank, SOC1, 2, 3 and FISMA. She identifies process and control weaknesses, analyzes complex systems and works with clients to streamline operations within time and resource constraints. She is also responsible for conducting global and national IT Risk Assessments and IT Control Assessments in numerous vertical markets inclusive of manufacturing, banks, financial services, collocation hosting facilities cloud providers, and application service providers.

Designations & Accreditation

  • Certified Information Systems Auditor
  • Certified Information Systems Manager
  • Certified in Risk and Information Systems Control