Matt Gilbert

Matt is a principal in Baker Tilly's risk advisory practice. Prior to joining Baker Tilly in 2020, Matt worked on the risk assurance practice of an international firm for 18 years. Matt leads Baker Tilly’s cybersecurity maturity model certification (CMMC) and government contractor IT risk suite of services. He has led IT audits and cybersecurity assessments for large primes down to smaller 8A contractors. Matt’s experience includes internal auditing, SOX compliance, information technology controls, business process controls and ERP risk and controls. Examples of these engagements include CMMC readiness assessments, 800-171 implementation projects, 800-53-based ATO readiness reviews, IT Risk assessments, Sarbanes-Oxley compliance, internal audit, pre- and post-implementation assessments and privacy assessments for clients.

Matt is actively engaged in supporting government contractors, grant recipients, state and local governments and federal agencies to navigate the CMMC requirements but has extensive experience supporting NIST 800-171 and 800-53-related assessments. Matt has also run fully co-sourced, internal audit engagements for large clients (multibillion dollars in revenues) in the government contracting industry.