Cliff is an industry leader and luminary in healthcare information technology, privacy, and security with more than 25 years of experience. Through his dedication to the healthcare sector and passion for tackling its most challenging risks, Cliff has created solutions for cybersecurity, compliance, and risk management that are actively leveraged by the world’s most recognized payors, providers, and vendors. Cliff started his career with PricewaterhouseCoopers (PwC) where he established and led the firm’s first dedicated healthcare security practice. He later became the lead architect of the HITRUST framework, the most broadly adopted healthcare security and privacy framework in the industry.
Cliff is a sought-after speaker and published author whose voice continues to elevate security standards throughout the healthcare ecosystem.
Fun facts about Cliff:
Cliff loves spending time with his family, never misses a Liverpool game, has visited the World Cup on five continents, and enjoys staying active and traveling.
Nadia is an industry thought leader and expert in the management of healthcare privacy and security programs. Drawing upon more than 20 years of operational experience as a former CISO and Privacy Officer with two large regional hospital and physician networks in Atlanta, Nadia oversees the firm’s overall operations and delivery mechanisms. She is a sought-after consultant and presenter on privacy, security, and compliance programs that provides a rich and relevant perspective for all of healthcare’s key stakeholders.
Fun facts about Nadia:
Nadia speaks four languages, enjoys traveling internationally, loves to read, and is a big tennis fan who has attended the U.S. Open once. Her daughter plays tennis at Rider University, a Division I school.
Angela brings 15 years of proven leadership in healthcare security, risk management, and regulatory compliance. She has partnered with leading healthcare providers, payers, and business associates to navigate some of the industry’s most complex regulatory environments, mitigate emerging risks, and architect scalable compliance and security programs that withstand evolving cyber threats. With deep expertise spanning multiple frameworks and regulations, Angela ensures clients not only achieve compliance but also build enduring security capabilities.
As Chief Services and Operations Officer, Angela leads design and delivery of Meditology’s full portfolio of services, along with the product and operations functions that support Meditology Services. She oversees the evolution of the combined product portfolio, ensuring that services and technology work together to deliver greater value, efficiency, and insight for clients. Angela also guides the operational foundation of the business, driving consistency, scalability, and disciplined execution across delivery, program management, and client support.
By bringing services, product, and operations under unified leadership, she is advancing the firm’s innovation agenda and strengthening Meditology’s position as premier partners for healthcare organizations.
Fun facts about Angela:
Living in the Adirondack Mountains, Angela embraces the outdoors year-round, whether hiking the high peaks, swimming in pristine lakes, or downhill skiing at the nearby Olympic site. Off the mountains, she channels her competitive spirit and passion for continuous learning through Brazilian jiu jitsu, a discipline that challenges both body and mind.
Shannon McNally, CCSFP is a seasoned IT risk management leader with over a decade of experience helping organizations identify, manage, and reduce technology and security risk across highly regulated environments. She currently serves as Manager, IT Risk Management at Meditology Services, where she also acts as owner of the HITRUST Service Line practice. Shannon brings deep expertise in HITRUST, SOC 1 and SOC 2, SOX, vendor risk management, and IT general controls. She is recognized for her ability implement automation and standards, and translate regulatory requirements into practical, sustainable solutions for clients.
Fun facts about Shannon:
Shannon loves everything true crime and is always looking for an opportunity to bring it up. She has three cats named Banksy, Fleabag and Penelope. While currently residing in Nashville, TN she has lived in 8 states throughout her lifetime and is working on finding number 9.
Jay leads Meditology’s go-to-market strategy and client growth, partnering with health systems, payers, and health technology companies to connect their cybersecurity, risk, and compliance investments to the outcomes their executives and boards care about most. He brings more than 15 years in healthcare information security. Before stepping into the CRO role, he led Meditology’s TPRM sales (CORL Technologies), building deep operational experience in vendor risk programs across providers, payers, and business associates. Jay also convenes Meditology Masterminds, a peer community where healthcare security leaders work through the challenges they share.
Fun facts about Jay:
Jay is a Tottenham supporter, avid golfer, recreational soccer player, and neighborhood wiffle ball home run derby champion.
Bethany is a seasoned cybersecurity and risk management executive with nearly 2 decades of experience spanning security consulting, operational leadership, and customer success. She leads a portfolio that includes Security Risk Assessments, GRC, Resiliency, HITRUST, Offensive Security Services, and Strategic Advisory, bringing together strategic vision and hands-on execution to help healthcare organizations strengthen their security and compliance posture.
Bethany also spent 5 years as a CISO, directing data security and threat response programs, and lead her organization through its first SOC 2 Type II. She later played a key role at CORL Technologies, focusing on customer success, strategy, and delivery of Third Party Risk Management (TPRM) services.
Over the course of her career, Bethany has worked with hundreds of healthcare organizations, assessing security, compliance, and risk management maturity and guiding clients toward practical, sustainable improvements. Her approach combines practitioner experience with consulting insight and a steadfast commitment to client relationships.
Outside of work, Bethany is a runner and fitness enthusiast who rowed port side in college. An avid traveler, she’s visited more than 40 countries and counting. She enjoys spending time outdoors, gardening, and exploring new places with her partner, Kai, and their two daughters.
Jonathan Elmer is an accomplished cybersecurity professional and IT risk management consultant with over a decade of experience in delivering impactful information security solutions aligned with critical business objectives. Known for a strategic approach to cybersecurity, Jonathan has a proven track record in leading regulatory and compliance-focused initiatives across highly regulated industries, particularly healthcare. His expertise spans the implementation of robust technical security programs that address evolving cyber threats, regulatory mandates, and client needs.
Alan DeVaughan is an experienced compliance and information security director with more than a decade of expertise supporting organizations through SOC 2 readiness assessments and examinations. As the lead for Meditology’s SOC 2 service line, he also serves as a consultant team leader, advising healthcare organizations of varying sizes and complexity on IT, privacy, security, and regulatory compliance. Alan also serves as one of the firm’s HITRUST quality professionals. Alan brings deep knowledge of leading security and compliance frameworks, including NIST, HITRUST, SOC 1 and SOC 2, HIPAA, and FFIEC. With a background in network administration, he has over 25 years of experience in information technology consulting across a wide range of industries. Alan holds a Bachelor of Science in Management of Information Systems from Maryville University. Alan is a Certified Information Systems Auditor (CISA), HITRUST Certified CSF Practitioner (CCSFP), and a Certified HITRUST Quality Professional (CHQP).
Fun facts about Alan:
Alan serves as the president of long-running Midwestern fan-run general interest science fiction and fantasy convention. Alan enjoys reading, traveling, and volunteering with his local YMCA branch.
Brandon has spent more than 11 years in IT and cybersecurity risk management, working primarily with healthcare organizations and the technology companies that serve them. He advises large providers and payers on the direction of their security programs, using risk assessments and ongoing advisory work to help leadership understand where the program stands and where it needs to go. He also works with health tech companies across the maturity spectrum, from early-stage startups to established platforms, guiding them through HITRUST certification and SOC 2 attestation, and leads incident response tabletop exercises for organizations looking to test how they would actually perform during an incident. Brandon previously led Meditology’s HITRUST and Incident Response Tabletop Exercise service lines before transitioning into leading the firm’s Third-Party Risk Management practice, where he helps clients stand up and mature their vendor risk programs and advises on the firm’s managed service offering.
Fun facts about Brandon:
Caroline Cronin is Chief Financial Officer of Meditology Services, responsible for the company’s finance and accounting operations. Her career spans senior financial leadership roles across software, technology services, and healthcare technology, including multiple CFO roles. She has led turnarounds, capital raises, and the successful sale of two public companies, each delivering a premium to shareholders. She also partners with executives on pricing, deal structuring, and services delivery operations. Caroline holds an MBA from Florida State University and is a Certified Public Accountant.
When not shuffling her two kids between club soccer games, Caroline enjoys working in her yard, reading, and traveling. She has visited 43 countries and territories to date!
Ed is an experienced executive with multiple years leading teams, optimizing processes, and driving operational excellence. As Chief Customer Officer at QModo AI, he worked alongside a talented team to ensure our customers realize the value of our AI-powered solutions. As the Co-Founder of Air Amelia Aircrafts, he and the team designed the next-generation, mission-critical aircraft designed to revolutionize the air medical industry.
Throughout his career, he has focused on delivering exceptional outcomes by combining customer relationship management, process improvement, and a commitment to quality. He has held leadership roles in multiple startups, always staying focused on solving real-world problems for customers. Guided by core values of Service, Compassion, Quality, and Hard Work, he is passionate about building teams and organizations that are both high-performing and purpose-driven.
