ISO IT Management / Operations Consultant

I am looking to hire a consulting group to do an analysis / health check / sanity check for a small (18 person / 350 user) IT department for a pharmaceutical manufacturing company. I would like to hear an independent person’s risk analysis on how we are operating and where are the areas for improvement as we expand our overall support responsibilities.
I am not looking to spend $250K to show me where I can save $50K.
Companies like Gartner Group would probably be overkill for us.
I am also not looking for someone to sell us software to solve all of our problems.
Can any of you recommend a consulting group preferably in the Northeast US area.
Thanks, John