Home / Leadership / Jenny Shen
Jenny Shen
CISA, CISSP, CCSFP, QSA, ISO 27001 Senior Lead Auditor, ISO 27701 Lead Auditor
Partner
Focus: SOC · HITRUST · ISO · PCI
- SOC 1
- SOC 2
- HIPAA
- HITRUST
- ISO 27001
About Jenny
Jenny has been in risk advisory and compliance since 2008. She spent 7 years at Ernst & Young where she was responsible for both audit and advisory engagements across financial services, energy, technology, and healthcare sectors. Since 2015, she has been focusing on serving SaaS-based companies, assessing their control environments as part of SOC reporting, HIPAA compliance, ISO 27001 and HITRUST certification, and PCI compliance initiatives.
She is a certified information systems auditor (CISA), HITRUST assessor (CCSFP), information systems security professional (CISSP), PCI QSA, ISO 27001 Lead Auditor, and AWS cloud practitioner. Jenny received her Bachelor of Science and Master’s degrees in Information Systems Management from Brigham Young University.
Areas of focus
Core services
Credentials
Professional background
Credentials
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP)
- Certified CSF Practitioner, HITRUST (CCSFP)
- PCI Qualified Security Assessor (QSA)
- ISO/IEC 27001 Senior Lead Auditor (PECB)
- ISO/IEC 27701 Lead Auditor
Education
- Master's, Management Information SystemsBrigham Young University
- B.S., Information Systems ManagementBrigham Young University
Articles by Jenny
Insights from Jenny
PCI DSS 4.0 Mandatory Requirements: 2025 Compliance Guide
Learn PCI DSS 4.0's 47 mandatory requirements that are now in effect. Complete guide covering authentication, encryption, logging, and vulnerability management.
ComplianceNavigating Regulatory Compliance - A Helpful Guide
Navigating regulatory compliance like HIPAA, GDPR, GLBA, and FISMA can be hard. Linford & Co. can help, with 16 years of expertise as certified auditors.
HIPAAIT Risk Assessment Required for HIPAA Compliance
Get an IT Risk Assessment by the experts at Linford and Company, for greater HIPAA compliance and better protection against data breaches and OCR audits.
Other partners
More of our partners
Talk to a partner
Ready to talk?
Connect with Jenny to discuss your IT audit, compliance, or certification needs.