I am looking for someone to help audit a healthcare acquisition's security and IT practices. Does anyone have a recommended vendor for this?

The business has ~26 locations across multiple states and provides both medical and non-medical services.