Lead expansion and maintenance of a Zero Trust security program across hybrid on-premises and cloud environments. Manage identity and access controls, deploy and tune SIEM/EDR/XDR/IAM tooling, automate security operations, reduce alert fatigue, and collaborate with IT, DevOps, and business teams to strengthen enterprise security across endpoints, cloud, SaaS, identity, network, and data protection.

Leads security operations, including threat detection, monitoring, incident response, vulnerability management, threat hunting, and security automation. Manages and mentors security engineers, develops playbooks and SOPs, supports audits and compliance frameworks, and partners with IT, DevOps, Infrastructure, and Engineering teams to improve security posture and risk management.

Supports and strengthens the organization’s governance, risk, and compliance program by administering and optimizing GRC technology, automating compliance workflows, coordinating SOC 2 Type II activities, managing third-party risk and vendor assessments, and responding to customer security questionnaires. The role also supports audit readiness, control testing, remediation, documentation, and evolving compliance initiatives while collaborating with technical and non-technical stakeholders.