Troy Fine

Co-Founder

16 yrs 1 mo experience

Key Highlights

Expert in SOC 2 and Cybersecurity compliance.
Active volunteer shaping the future of CPA.
Passionate about educating the GRC community.

Stackforce AI infers this person is a Cybersecurity Compliance Expert with a focus on GRC and auditing.

Contact

Skills

Core Skills

Soc 2Cybersecurity

Other Skills

ISO 27001ISO 42001HIPAAGovernance, Risk Management, and Compliance (GRC)IT AuditInternal AuditInternal ControlsAuditingSSAE16/SOC 1Cloud SecurityRisk ManagementInformation SecuritySQLOracleSOX 404

About

I am a CPA, CISA, CISSP. My areas of expertise include, GRC, SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, CMMC, NIST 800-171, NIST 800-53, SOX, HITRUST, HIPAA, PCI DSS, FedRAMP, StateRAMP, and GDPR. I volunteer with the AICPA on various task forces and working groups helping to shape the future of the CPA. I enjoy helping and educating the GRC and auditing community. I am always open to chatting about these subjects.

Experience

16 yrs 1 mo

Total Experience

2 yrs 1 mo

Average Tenure

2 yrs

Current Experience

Fine assurance

Co-Founder

Feb 2025 – Present · 1 yr 4 mos · United States · Remote

Fine Assurance is a CPA firm specializing in SOC 2, ISO 27001, ISO 27701, ISO 42001, HIPAA, GDPR, and cybersecurity advisory services.
With a focus on exceptional service and attention to detail, we prioritize client experience. We keep compliance practical and purposeful, focusing on what matters most to your business. Our audits are streamlined, efficient, and designed to deliver meaningful results, not just checkboxes.

SOC 2ISO 27001ISO 42001HIPAACybersecurity

Geels norton

2 roles

Director, SOC and ISO Assurance Services

Promoted

Jul 2024 – Feb 2025 · 7 mos · Remote

Senior Advisor

Jan 2024 – Jul 2024 · 6 mos · Remote

Grc uncensored

Co Host

Jun 2024 – Present · 2 yrs

Drata

2 roles

Director, Compliance Advisory Services

Promoted

Dec 2022 – Jan 2024 · 1 yr 1 mo

Senior Manager, Compliance Advisory Services

Aug 2021 – Dec 2022 · 1 yr 4 mos

Schneider downs

3 roles

Senior Manager, IT Risk Advisory Services

Oct 2020 – Aug 2021 · 10 mos · United States

Manager, IT Risk Advisory Services

Jun 2016 – Oct 2020 · 4 yrs 4 mos · United States

Schneider Downs is one of the 60 largest public accounting firms in the United States. The firm offers more than 80 services from five business units: Assurance and Tax Advisors; Business Advisors; Corporate Finance Advisors; Technology Advisors; and Wealth Management Advisors. With offices in Pittsburgh and Columbus, Schneider Downs serves clients in Pennsylvania, Ohio, West Virginia, New York, Maryland and around the world.

Sr. IT Auditor, Risk Advisory Services

Nov 2011 – Jun 2016 · 4 yrs 7 mos · United States

I was responsible for providing high quality, professional day-to-day execution of internal audit engagements and special projects. I assisted management in preparing risk assessments, audit plan programs, and internal audit reports. I was also responsible for:
Identifying, evaluating and documented IT business risks and general computer and application controls.
Evaluating security and controls of Windows, UNIX, firewalls, database environments and network devices.
Performing and documenting test results and walkthroughs of IT processes and controls.
Evaluating test results and assessing controls for compliance with Sarbanes-Oxley, SSAE16/SOC1, SOC 2, HIPAA and PCI requirements.
Presenting and discussing audit findings and recommendations with client management.
Assisting on special projects as assigned (e.g., data mining, security assessments, etc.)

A-lign

Managing Consultant

Dec 2015 – Jun 2016 · 6 mos · Tampa/St. Petersburg, Florida Area

A-lign is a nationwide compliance and security assessment solutions firm.

Information control company (icc)

Business Intelligence Consultant

May 2010 – Nov 2011 · 1 yr 6 mos · Columbus, Ohio Area

I was responsible for performing data analysis and modeling using a variety of analytic techniques, tools, and programming languages to provide business insight and product analytics. I was also responsible for assisting clients with extracting data from legacy systems and transforming data into formats that could be loaded into data warehouses by using ETL tools such as Informatica and DataStage.
ICC is a leader in enterprise technology services that provides superior quality Business, Digital, and Technology Solutions. Utilizing their unique adapted-Agile processes, they deliver high-quality, innovative business critical solutions that enable their clients to maintain competitive advantage