Laura Stevens-Lumpkin Cgeit, Cisa, Ccsk Email & Phone Number

Laura Stevens is an IT Risk Management professional with over 20 years of audit, risk and project management experience. She is proficient at identifying the root cause of problems and then developing creative resolutions. Her expertise includes PCI-DSS, Sarbanes-Oxley 404, FFIEC, GLBA, NV and MA Privacy, NAIC, HIPAA, ITIL, CobIT, NIST as well as IT best practices to ensure controls adequately mitigate risks. Her excellent communication skills and experience in managing IT risk at all three levels (Front Line Business, Second Line Corporate, Third Line Internal/External Audit) facilitate close rapport with end users as well as executive-level personnel. Laura is proficient in managing teams that evaluate the risks, determines whether adequate controls are in place to mitigate risks effectively, and then provides recommendations to address the organization's risk management needs as well as opportunities for improvement. Since 2007, Laura was engaged in over 20 Sarbanes-Oxley 404 projects for 13 different companies. Laura began working with Wells Fargo Bank by helping the Small Business Lending group develop and maintain an information security risk program to ensure compliance with the Corporate Information Security Policy. She was responsible for the review of control standards, information security risk assessments and the associated activities to maintain security plans for internally supported applications as well as being the Subject Matter Expert for Third Party application risk management. Prior to retirement, Laura provided both technology and information security risk management oversight in Corporate Risk (second line of defense) for Repetitive Process Automation (RPA), Strategic Technology and Digital Transformation.Laura managed a project of redefining a client's IT Governance framework to ensure consistent and repeatable IT processes across their US and European IT operations. She selected the processes and controls appropriate to their enterprise. She then realigned internal audit’s tool used for providing assurance to management. She continued working with IT management to create performance measurements using Key Goal Indicators, Key Performance Indicators and a balanced scorecard.

• 

  Ferris State University

  Computer Information Technology