Lydia Carpenter Email & Phone Number

Chicago, Il, Us

United States

United States

● Successfully partnered with a Qualified Security Assessor (QSA) to oversee and execute annual PCI assessments and penetration tests. This rigorous process led to the delivery of Delek’s Report on Compliance and Attestation of Compliance, ensuring top-tier adherence to industry standards and significantly enhancing data security.● Completed a comprehensive gap analysis for transitioning from PCI DSS 3.2.1 to 4.0, documented scoping requirements for the new version (March 2024), and ensured a smooth alignment with the updated standards.● Analyzing and preparing for PCI DSS v4.0 requirements for the March 2025 deadline, developing strategies to maintain and enhance data security and compliance in line with the latest industry standards.

United States

● Led multi-regional PCI v4.0 compliance initiative for Fortune 500, proactively identifying and remediating gaps (20% reduction) through expertise in security assessments and v4.0 requirements. Developed comprehensive documentation (IRLs, DRLs, network diagrams, SAQ-A) and managed high-performing team of 17 consultants.● Managed end-to-end PCI assessments, liaising with third-party specialists to leverage expertise and streamline procedures for efficiency and accuracy. Ensured adherence to industry standards and regulations throughout the assessment lifecycle, achieving consistent success and strengthening compliance frameworks.● Pioneered a strategic scope-limiting methodology within a cross-functional team of cybersecurity experts to enhance Business as Usual (BAU) security posture, boost operational efficiency for PCI DSS Service Providers, and validate compliance which empowered the advancement of company assessment and compliance efforts to meet stringent regulatory standards.● Strengthened client satisfaction by fostering open and transparent communication channels with multiple points of contact, reducing the average number of clients inquires by 30% and expediting the delivery of requested documentation from 5 business days to 4 business days. ● Meticulously analyzed existing compliance procedures by identifying key gaps, streamlining workflows, and remediating areas of non-compliance which enhanced efficiency, significantly improved overall compliance management, bolstered risk mitigation strategies, and safeguarded the company’s reputation and financial assets.

United States

● Successfully reduced international insurance fraud risk by validating covered causes of loss and establishing proper reserves, leveraging audit, compliance, and security skills through streamlined communication with clients, attorneys, Underwriters at Lloyd's of London, and policyholders by preparing comprehensive reports and requests, expediting the process for closure and resolution of the claim. ● Led comprehensive third-party oversight initiatives, collaborating with external vendors and stakeholders to assess, monitor, and enhance security controls, ensuring compliance with PCI DSS standards and mitigating potential risks to sensitive financial data through thorough audits and diligent oversight measures. Providing oversight for third-party engagements and conducting PCI audits enhances security measures, ensures compliance with regulatory standards, mitigates risks, boosts stakeholder confidence, and improves operational efficiency for the company.● Develop and manage executive-level information security communications to support risk-informed business decisions, ensuring accuracy and clarity in reports, leading quality control efforts, collaborating with stakeholders on risk metrics, and implementing best practices for effective cybersecurity reporting.

United States

● Directed customer trust initiatives by handling security inquiries, overseeing RFP and audit responses, and crafting detailed security documentation; partnered with internal teams and legal departments to ensure accuracy and efficiency, implemented automation to streamline processes, and developed metrics to track and improve program performance.● Discerned liability and coverage benefits by collecting evidence, interviewing witnesses, and analyzing claims data to pinpoint potential fraud indicators. Negotiated and settled claims with policyholders and third parties, ensuring a secure and compliant claims resolution process.● Resolved claims fairly and efficiently, while protecting customer data and mitigating fraud risks. This proficiency contributed to faster claim resolutions and increased customer satisfaction, directly influencing the company's bottom line and enhancing its reputation among clients.

United States

● Mitigated PCI compliance risks for State Farm by conducting comprehensive security assessments, identifying, and remediating vulnerabilities, ensuring adherence to PCI DSS standards, and fostering a culture of data security awareness. ● Successfully recommended fitting additional riders based on each individual insured's specific needs, as disclosed during in-depth annual policy reviews which avoided out-of-pocket costs for unforeseen circumstances and strengthened customer satisfaction and trust in the company.● Increased client satisfaction and revenue for the company by reducing clients' exposure to financial losses and helping them to meet their insurance needs.

United States

● Ensured accurate processing of customer credit and debit card transactions by meticulously capturing cardholder information. Adhered to PCI DSS standards to protect data from theft and unauthorized use. This approach maintained transaction integrity and safeguarded sensitive customer information.● Lead cross-functional teams in building and maintaining a robust internal control framework. Leverage data analytics to identify and mitigate risks while driving operational efficiency. Ensure regulatory compliance and protect organizational assets through strong risk management practices.● Oversaw the implementation of process automation tools to streamline business operations and improve data accuracy. Employed data analytical methods to identify and mitigate risks, ensuring compliance with industry standards. This led to more efficient workflows and a reduction in operational errors.