Home / Leadership Team / Darren Hulem, CISA, CEH, Security +
Darren Hulem has 10 years of experience working in the Information Technology space. He has been with GRF’s Risk and Advisory services department for the last 4 years helping clients better understand the cybersecurity risks to their organizations. Darren uses his expertise to assist clients with executing detailed cybersecurity engagements in the following areas: cybersecurity risk assessments, vulnerability assessment analysis, IT audits, co-sourced internal IT audits, ISO 27001:2013 compliance internal audits, IT policy and procedure benchmarks against leading frameworks such as (ISO, NIST, PCI, HIPAA, CIS, SOC 2), penetration testing, IT training, and third-party risk assessments. He also enjoys providing presentations to clients senior leadership and board members in a digestible way.
Darren is a seasoned speaker on cybersecurity topics. He has presented at the IIA International Conference, various IIA Chapters, AICPA, MACPA, GWSCPA, Humentum, UST Education, and NYCON. He enjoys sharing his experiences from client triage and cleanup with organizations as to the importance of IT controls.
Prior to joining GRF, Darren worked with his clients as a managed service provider which has allowed him to experience a wide variety of technologies, budgets and clients. There he would recommend and implement system improvements as well as troubleshoot client networks to ensure their daily IT operations functioned. He takes pride in being to translate technical topics so that all decision makers can make informed decisions.
Cybersecurity is a part of every organization’s daily life. Want to learn how to protect your organization but become overwhelmed…
This eBook outlines 20 different cybersecurity risk categories that can impact your organization, detailing how to identify and address them.
Government Contractors are more reliant on technology than ever before to deliver on their obligations. The integration of digital technology…
Would you do business with an organization you don’t trust? Safeguarding the sensitive data your organization receives from donors, customers,…
Our 2025 Top Risks Report explores the top risk themes of the year and the potential implications for nonprofits and…
In response to growing IT and cybersecurity risks, auditors are placing greater scrutiny on IT risk and risk controls in…
At the start of 2024, the landscape of risks facing organizations is evolving at an unprecedented pace. The Risk &…
Virtual Cyber Symposium for Nonprofits & Associations: Tax exempt organizations are not exempt from the growing threats of cyberattacks. Nonprofit…
Understanding and mitigating third party risk has become more important than ever, which makes now the perfect time for your…
Are you in the loop when it comes to the latest guidance issued by DCAA? Join GRF Principal of Outsourced…
Join us as we delve into the cutting-edge realm of cybersecurity and artificial intelligence. In a rapidly evolving digital landscape,…
Does your organization know all the third-party vendors who access and manage data on your behalf? In the event of…
A medical facility serving homeless patients was dealing with a newly-hybrid work environment, increased government scrutiny on IT security, and…
Cybersecurity is a part of every organization’s daily life. Want to learn how to protect your organization but become overwhelmed…
This eBook outlines 20 different cybersecurity risk categories that can impact your organization, detailing how to identify and address them.
Government Contractors are more reliant on technology than ever before to deliver on their obligations. The integration of digital technology…
Would you do business with an organization you don’t trust? Safeguarding the sensitive data your organization receives from donors, customers,…
Our 2025 Top Risks Report explores the top risk themes of the year and the potential implications for nonprofits and…
In response to growing IT and cybersecurity risks, auditors are placing greater scrutiny on IT risk and risk controls in…
At the start of 2024, the landscape of risks facing organizations is evolving at an unprecedented pace. The Risk &…
Virtual Cyber Symposium for Nonprofits & Associations: Tax exempt organizations are not exempt from the growing threats of cyberattacks. Nonprofit…
Understanding and mitigating third party risk has become more important than ever, which makes now the perfect time for your…
Are you in the loop when it comes to the latest guidance issued by DCAA? Join GRF Principal of Outsourced…
Join us as we delve into the cutting-edge realm of cybersecurity and artificial intelligence. In a rapidly evolving digital landscape,…
Does your organization know all the third-party vendors who access and manage data on your behalf? In the event of…
A medical facility serving homeless patients was dealing with a newly-hybrid work environment, increased government scrutiny on IT security, and…
Cybersecurity is a part of every organization’s daily life. Want to learn how to protect your organization but become overwhelmed…
This eBook outlines 20 different cybersecurity risk categories that can impact your organization, detailing how to identify and address them.
Government Contractors are more reliant on technology than ever before to deliver on their obligations. The integration of digital technology…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Organizations use their online presence to attract donors, members, and clients…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series The threat of cyberattacks is frightening, persistent, and can affect any…
Nonprofits are more reliant on technology than ever before to deliver on their mission. The integration of digital technology into…
GRF is proud to present at the MACPA 2025 Government & Not-for-Profit Conference.
GRF’s 2nd annual Cybersecurity Symposium brought together industry leaders to discuss the evolving landscape of data privacy, cybersecurity, and enterprise…
Join GRF’s Government Contracting experts for a virtual summit designed to equip you with the knowledge and tools necessary to…
GRF’s second annual Virtual Cyber Symposium is designed to provide a 360-degree overview of the latest strategies for improving cybersecurity…
Join GRF and APCPA at the Manor Country Club in Rockville, MD, for an engaging discussion on cybersecurity, technology best…
In this session, GRF will review the existing landscape of cybersecurity, technology, and AI. We’ll emphasize significant trends and address…
Join us online for the MACPA 2024 Government and Not-for-Profit Conference. The conference will feature general sessions from GRF’s experts…
GRF’s first annual Virtual Cyber Symposium for Nonprofits & Associations brought together experts in cybersecurity, privacy, and insurance to share…
Cybersecurity threats are always changing and hackers are busy finding ways to exploit your assets. Download a PDF copy of…
Virtual Cyber Symposium for Nonprofits & Associations: Tax exempt organizations are not exempt from the growing threats of cyberattacks. Nonprofit…
In this engaging session, we’ll guide you through an immersive journey where technology meets security, and human expertise joins forces…
Join us for a review of DCAA’s current guidance on audit procedures including incurred cost proposals, business systems and defective…
The GRC Conference gathers leading minds from around the world to provide dedicated professionals like you with the most up…
Developing and maintaining a third party risk management (TPRM) program can help to reduce the overall risk to your organization.…
Cybersecurity is always changing and evolving as threats grow. Here are ideas that you can start on today that will…
Is your organization focused on the right issues when it comes to privacy, IT asset protection and third party risk…
This session is being presented in collaboration with UST Education.
Join us online and in-person at the Maritime Conference Center in Linthicum, MD, for the MACPA 2023 Government and Not-for-Profit…
This session is being presented as a re-broadcast of the 2022 GWSCPA Nonprofit Symposium.
This session is being presented in collaboration with UST Education.
TLDR: End user cybersecurity training is essential for preventing malicious actors from gaining unauthorized access to your organization’s network. Creating…
This session will cover some of the top cyber frameworks and how to customize controls to the context of your…
By Darren Hulem, CISA, CEH, Security +, Senior Manager, Risk & Advisory Services As cyberattacks grow in frequency and complexity,…
This session is being presented as part of the 2022 GWSCPA Nonprofit Symposium.
Join GRF’s risk advisory services team to discuss possible vulnerabilities and weaknesses that malicious actors may already know about, and…
Cybersecurity is a part of every organization’s daily life. Want to learn how to protect your organization but become overwhelmed…
Don’t miss the opportunity to take home advice from some of the most influential leaders in the risk community! Join…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Fraudulent domains look very similar to your organization’s domain name and…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Securing the privacy of your organization’s employee and customer data is…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Social media has allowed organizations to connect with customers around the…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Simply put, Identity and Access Management (IAM) is the discipline of…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Web applications are a top target for attackers. Hackers are constantly…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series It’s crucial for your organization to have an online presence to…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Identifying and mitigating website risks Data breaches are costly, and the…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Organizations use their online presence to attract donors, members, and clients…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series The threat of cyberattacks is frightening, persistent, and can affect any…
Nonprofits are more reliant on technology than ever before to deliver on their mission. The integration of digital technology into…
GRF is proud to present at the MACPA 2025 Government & Not-for-Profit Conference.
GRF’s 2nd annual Cybersecurity Symposium brought together industry leaders to discuss the evolving landscape of data privacy, cybersecurity, and enterprise…
Join GRF’s Government Contracting experts for a virtual summit designed to equip you with the knowledge and tools necessary to…
GRF’s second annual Virtual Cyber Symposium is designed to provide a 360-degree overview of the latest strategies for improving cybersecurity…
Join GRF and APCPA at the Manor Country Club in Rockville, MD, for an engaging discussion on cybersecurity, technology best…
In this session, GRF will review the existing landscape of cybersecurity, technology, and AI. We’ll emphasize significant trends and address…
Join us online for the MACPA 2024 Government and Not-for-Profit Conference. The conference will feature general sessions from GRF’s experts…
GRF’s first annual Virtual Cyber Symposium for Nonprofits & Associations brought together experts in cybersecurity, privacy, and insurance to share…
Cybersecurity threats are always changing and hackers are busy finding ways to exploit your assets. Download a PDF copy of…
Virtual Cyber Symposium for Nonprofits & Associations: Tax exempt organizations are not exempt from the growing threats of cyberattacks. Nonprofit…
In this engaging session, we’ll guide you through an immersive journey where technology meets security, and human expertise joins forces…
Join us for a review of DCAA’s current guidance on audit procedures including incurred cost proposals, business systems and defective…
The GRC Conference gathers leading minds from around the world to provide dedicated professionals like you with the most up…
Developing and maintaining a third party risk management (TPRM) program can help to reduce the overall risk to your organization.…
Cybersecurity is always changing and evolving as threats grow. Here are ideas that you can start on today that will…
Is your organization focused on the right issues when it comes to privacy, IT asset protection and third party risk…
This session is being presented in collaboration with UST Education.
Join us online and in-person at the Maritime Conference Center in Linthicum, MD, for the MACPA 2023 Government and Not-for-Profit…
This session is being presented as a re-broadcast of the 2022 GWSCPA Nonprofit Symposium.
This session is being presented in collaboration with UST Education.
TLDR: End user cybersecurity training is essential for preventing malicious actors from gaining unauthorized access to your organization’s network. Creating…
This session will cover some of the top cyber frameworks and how to customize controls to the context of your…
By Darren Hulem, CISA, CEH, Security +, Senior Manager, Risk & Advisory Services As cyberattacks grow in frequency and complexity,…
This session is being presented as part of the 2022 GWSCPA Nonprofit Symposium.
Join GRF’s risk advisory services team to discuss possible vulnerabilities and weaknesses that malicious actors may already know about, and…
Cybersecurity is a part of every organization’s daily life. Want to learn how to protect your organization but become overwhelmed…
Don’t miss the opportunity to take home advice from some of the most influential leaders in the risk community! Join…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Fraudulent domains look very similar to your organization’s domain name and…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Securing the privacy of your organization’s employee and customer data is…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Social media has allowed organizations to connect with customers around the…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Simply put, Identity and Access Management (IAM) is the discipline of…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Web applications are a top target for attackers. Hackers are constantly…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series It’s crucial for your organization to have an online presence to…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Identifying and mitigating website risks Data breaches are costly, and the…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series Organizations use their online presence to attract donors, members, and clients…
GRF Cybersecurity Risk Assessment and Scorecard Blog Series The threat of cyberattacks is frightening, persistent, and can affect any…
Nonprofits are more reliant on technology than ever before to deliver on their mission. The integration of digital technology into…