Diane Mccarthy Email & Phone Number

Charlotte, Nc, Us

Advise clients on best practices and strategies to enhance their cybersecurity posture. Consults on privacy laws, security control frameworks, and risk management methodologies to enhance customers’ cybersecurity and privacy programs. As well as provide insight on the Carbide Platform design and overall program. *Consult with over 70 clients’ on their current security infrastructure, identify gaps, and recommend solutions to mitigate risks and protect against cyber threats.*Develops content and executes audit readiness strategies that have resulted in a 100% success rate for customers undergoing certification audits such as SOC 2 and ISO 27001.*Creates policy baselines that encompass 90% of multiple control frameworks and privacy regulations that Carbide supports.

Played a key role in designing and implementing a high-quality cybersecurity quantification risk rating platform for effectively communicating cyber risk and third-party risk for clients. * Successfully implemented the FAIR methodology into a risk quantification platform that provides valuable security insights for risk-based decision-making. The company sold for 25 million dollars.

Hearst Tower, 214 N Tryon St #4200, Charlotte, Nc 28202

Led high-performing teams to consult and manage privacy, security architecture, and risk management initiatives for Fortune 500 customers. Identified vulnerabilities, addressed gaps, and aligned security practices with industry standards and legal regulations. * Saved a company from significant financial loss after uncovering security issues while performing due diligence during a merger and acquisition project.* Optimized the GRC Archer Platform to provide instant security gap analysis, resulting in a 90% reduction in assessment duration.* Utilized threat modeling technique that resulted in hours of saved code redevelopment time.* Developed tailored security and privacy programs for a minimum of 4 different companies based on identified risk and privacy requirements such as GDPR.* Completed a tool rationalization project saving the company two million dollars a year.

Charlotte, North Carolina Area

Designed a company-wide risk assessment program including GRC risk management automation utilizing Archer and the FAIR methodology. * Risk assessment automation resulted in a 75% improvement in efficiency by streamling the business and security requirements. * Mapped TIAA-specific controls into the Archer platform ensuring 99% compliance with automated documenting of the 1% exceptions.* Remediation efforts were 100% documented and monitored to completion including automated email reminders.* Executive-level reporting integrated control assessments, penetration tests, code reviews, and remediation efforts into a single comprehensible risk-based report.

Charlotte, North Carolina Area

Conducted detailed information security assessments to uncover inefficiencies across internal and vendor applications and develop mitigation strategies. Established and participated in the design, execution, and monitoring of the vendor security program. *Implemented timesaving interview techniques resulting in a 50% reduction in time spent on security information gathering.*Maintained relationships with over 100 third-party vendors completing assessments and consulting on mitigation strategies. *Developed and implemented questionnaires and remediation follow-up techniques resulting in 100% alignment of cybersecurity policies, processes, and practices with Wells Fargo's expectations.*Consolidated findings from questionnaires, code reviews, penetration tests, and mitigation strategies into a single report, reducing report generation time by 75%. *Created automated access control reviews increasing review completion often to 100%.

Bachelor, Telecommunications\Network Management, 3.76/4.0

Associates Of Applied Science, 3.95/4.0