- Conduct security audits and risk assessments of network systems, applications, and processes, and maintain a prioritized risk register.
- Establish and maintain a network-wide security baseline aligned with a recognized framework, and report security posture and maturity metrics.
- Review vendors and technology platforms for security risks, and coordinate penetration testing and vulnerability scanning.
- Define and monitor access control standards, including MFA, SSO, least privilege, and joiner/mover/leaver processes.
- Partner with Regional IT Administrators on endpoint and device security standards and advise engineering on secure-by-design practices.
- Own and maintain information security policies, standards, and procedures, and communicate policy changes across regions.
- Manage the KnowBe4 security awareness program, including training, phishing simulations, and completion reporting.
- Maintain the incident response plan and coordinate security incidents with Legal, Communications, and affected regions.
- Support data protection compliance, business continuity and disaster recovery planning, and audit and regulatory documentation.