
Nirav Shah is a principal with Baker Tilly’s risk advisory practice. With nearly 20 years of experience working in technology and IT risk advisory. Nirav’s expertise includes System and Organization Controls (SOC) readiness assessments and SOC 1, SOC 2 and SOC 3 report projects across a wide variety of industries. He specializes in multiple frameworks, including SOC, Health Insurance Portability and Accountability Act (HIPAA) and ISO 27001. As a certificate decision maker for Baker Tilly’s risk advisory - International Organization for Standardization (ISO) practice, he ensures engagement execution meets internal quality assurance requirements and ISO/International Electrotechnical Commission (IEC) standards.
- Principal-in-charge of ISO examinations across a variety of industries and technologies
- Plans, performs and executes SOC1, SOC2 and SOC3 report projects across a wide variety of industries and frameworks including ISO 27001 and HIPAA
- Performs consulting services to plan, develop, execute and improve internal control procedures for suitability of design and operational effectiveness
- Licensed Certified Public Accountant (CPA)
- Information Systems Audit and Control Association (ISACA)
- Certified Information Systems Auditor (CISA)
- Certified Information Technology Professional (CITP)