Meet the Experts / Lucas Baiocchi

Lucas Baiocchi

 ()

Sr Manager, HITRUST InfoSec Assurance

Lucas Baiocchi

Lucas has more than eight years of experience in information security audits and assessments. As Thoropass’ HITRUST InfoSec Assurance Senior Manager, he leads and executes HITRUST assessments, working closely with organizations to evaluate their security posture, validate control effectiveness, and deliver clear, actionable insights that align compliance objectives with broader business goals. His approach ensures not only regulatory and standards-based compliance, but also the adoption of efficient, scalable, and realistic security solutions.

Prior to joining Thoropass he spent six years in cybersecurity and risk management roles at healthcare security consultancy Meditology. He has guided a diverse range of clients – from agile, cloud-native startups to complex, on-premises global enterprises.

Lucas holds a degree in Information Systems from San Diego State University and is certified as a Certified CSF Practitioner (CCSFP), Certified HITRUST Quality Professional (CHQP), and Healthcare Information Security and Privacy Practitioner (HCISPP).

Publications

No items found.
Lucas Baiocchi

Experience

8+ years in IT security audit and assessments

Framework Expertise

HIPAA,

HITRUST,

NIST CSF,

NIST 800-53,

PCI DSS,

SOC 1,

SOC 2,

ISO 27001,

Compliance Experience

Education

San Diego State University