Conduct client security risk assessments against NIST, ISO 27001, and CIS frameworks; evaluate controls and evidence, identify vulnerabilities and compliance gaps, document findings, and prepare executive reports. Lead client kickoff and debrief meetings, manage assessment communications, and provide remediation guidance. Investigate escalated security incidents, analyze root causes, maintain case documentation, and collaborate with SOC, IT, engineering, and senior security teams.