ALESSANDRA Carpenter
Jacksonville Beach,FL
Summary
Dynamic IT Compliance Analyst with proven expertise at Fidelity National Financial in GRC and SOC 2 Type II compliance. Skilled in risk assessment and mitigation, I pioneered a Policy Intelligence Dashboard, enhancing policy management. Adept at stakeholder collaboration, I ensure audit readiness and maintain alignment with NIST CSF and ITGC standards.
Overview
5
5
years of professional experience
1
1
Certification
Work History
IT Compliance Analyst
Fidelity National Financial
Jacksonville, FL
07.2025 - Current
- Manage full lifecycle of organizational Policies, Standards & Program Plans — drafting, versioning, annual reviews, and stakeholder approvals
- Perform gap analyses to keep documentation aligned with evolving regulatory and business requirements
- Map and maintain controls against NYDFS (23 NYCRR 500), NIST CSF, ITIL, TSC, and SOC 2 requirements
- Monitor regulatory changes and proactively recommend policy updates to sustain continuous compliance
- Facilitate SOC 2 audits end-to-end evidence collection, auditor liaison, and control owner coordination.
- Author control design documents defining objectives, ownership, frequency, and evidence requirements.
- Pioneered the company's first Policy Intelligence Dashboard—a centralized Power BI reference consolidating every definition, role, and responsibility across all policies and standards company-wide.
IT Project Analyst Intern
FLORIDA BLUE CROSS BLUE SHIELD
Jacksonville, FL
05.2024 - 09.2024
- Provided administrative and analytical support for IT and business projects, including preparing meeting minutes, presentations, and project action trackers.
- Led operational projects focused on improving risk and compliance processes, ensuring adherence to security and governance standards.
- Created and maintained knowledge base articles and process documentation for access control procedures.
- Maintained and organized project documentation using SharePoint, ensuring proper archiving and retrieval.
- Developed documentation and provided oversight for security-related process improvements, including standardizing Smartsheet usage for IT teams.
- Collaborated with senior leaders, project teams, and stakeholders.
Pharmacy Representative
MEDICARE, HUMANA, INC
Jacksonville Beach, FL
11.2021 - 12.2023
- Handled over 60 client interactions per day, providing clear explanations of coverage, benefits, and processes.
- Demonstrated excellent communication skills to external stakeholders, providing clear explanations of coverage, benefits, and claims processes.
- Troubleshot and resolved application access issues, ensuring minimal downtime and seamless user experience.
- Maintained electronic health records and ensured compliance with confidentiality and HIPAA regulations.
Education
MBA - INFORMATION TECHNOLOGY MANAGEMENT
Western Governors University
Salt Lake City, UT07-2026
BACHELOR OF SCIENCE - CYBERSECURITY AND INFORMATION ASSURANCE
Western Governors University
Salt Lake City, UT02-2025
Skills
- GRC and SOC 2 Type II
- NIST CSF
- ITGC
- Risk assessment and mitigation
- Information security and data privacy
- Power BI
- Third-party risk management
- Audit readiness
Certification
- CompTIA PenTest+, 12/24
- CompTIA CySA+, 12/24
- CompTIA Project+, 11/24
- LPI Linux Essentials, 10/24
- ISC2 Systems Security Certified Practitioner, 07/24
- ITIL Foundation Certificate in IT Service Management, 06/24
- CompTIA Security+, 04/24
- CompTIA Network+, 03/24
- CompTIA A+, 01/24
- Professional Scrum Master I, 12/23
Timeline
IT Compliance Analyst
Fidelity National Financial
07.2025 - Current
IT Project Analyst Intern
FLORIDA BLUE CROSS BLUE SHIELD
05.2024 - 09.2024
Pharmacy Representative
MEDICARE, HUMANA, INC
11.2021 - 12.2023
MBA - INFORMATION TECHNOLOGY MANAGEMENT
Western Governors University
BACHELOR OF SCIENCE - CYBERSECURITY AND INFORMATION ASSURANCE
Western Governors University