- Translate the security roadmap into priorities, delivery plans, and team goals; assign ownership, monitor progress, and escalate resource constraints and unresolved risks.
- Coach security team members, manage performance, and oversee security vendors, projects, and approved budgets.
- Lead security control implementation across Azure, AWS, and on-premises environments; partner on architecture reviews, secure design, threat modeling, and software delivery pipeline security checks.
- Prioritize vulnerabilities by exposure and business impact, track remediation with accountable owners, and verify closure.
- Oversee cloud configuration monitoring, identity and privileged access controls, endpoint and network protection, encryption, and data loss prevention.
- Oversee monitoring, threat detection, investigation, and response; coordinate incident containment and recovery, maintain response plans, and track corrective actions.
- Maintain security policies, standards, risk assessments, and control evidence; support HIPAA, HITRUST, SOC 2, and internal reviews.
- Assess security risks in AI tools, external services, and third-party integrations, and implement safeguards against sensitive data exposure and unauthorized access.
AWSAzureHIPAA