Gregory Wehn, CISA, CRISC, and CDPSE

Director, IT Audit Blue Cross Blue Shield of Massachusetts

Greg Wehn is the Director of IT Audit and Risk Management for BCBSMA. Prior to this position he has served in multiple leadership positions in the audit, compliance, risk management, and IT security spaces. Most recently he’s been the Manager of IT Compliance and Internal Controls for Bright Horizons and prior to relocating to Boston served as the Manager of IT Audit for Blue Cross Blue Shield NC (BCBSNC). Prior to joining BCBSNC he served as the outsourced Managed Security Services Manager for BCBSNC, which is responsible for the Cyber Security, IAM, and Network Security operations.

Greg has more than fifteen years of experience in financial and IT auditing, risk management, IT compliance and governance, process reengineering, cyber security, and IT Operations. He has also held management positions for public accounting firms and IT Outsourcing organizations where he specialized in the financial services, banking, insurance, and healthcare industries. Greg's primary area of focus has been on aiding companies in the implementation of control and/or compliance frameworks, performing departmental performance gap assessments, and overseeing corrective or remediation action plans. He has performed these functions within state governments, global public companies, and privately held companies preparing for IPOs.

Greg holds the Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Data Privacy Solutions Engineer (CDPSE) professional accreditations through ISACA. He obtained a Bachelor’s Degree in Business Administration with a major in Accounting and minors in MIS, Finance, Economics, and Administration of Justice.