- Direct IT operations, including domain management, Google Workspace, and the broader platform portfolio.
- Oversee identity and permission governance, onboarding and offboarding, and organizational hardware through the MDM solution.
- Operate Vanta, manage SOC 2 Type II audits, maintain HIPAA alignment, and coordinate annual penetration testing.
- Evaluate third-party vendors and subprocessors, manage related DPAs and BAAs, and maintain policies, risk reviews, training, and trust resources.
- Establish AI risk governance models and monitor third-party artificial intelligence platform integration.
- Partner with legal advisors and leadership to identify, assess, and communicate security and compliance risks.
- Coordinate vulnerability, audit-item, and testing-finding remediation with software engineering teams.
- Lead cross-functional operational security projects and manage roadmaps, dependencies, and deliverables.
- Complete SIG, CAIQ, and custom client security questionnaires, coordinating complex queries with technical leads.
- Coordinate security-adjacent personnel operations with HR, including background verifications, policy sign-offs, training, and lifecycle checklists.
HIPAA