- Own and improve application and infrastructure security in partnership with Engineering.
- Lead vulnerability management, including external penetration testing, vulnerability disclosure, and remediation tracking.
- Manage the security compliance program, including SOC 2, future certifications, evidence collection, audits, and remediation.
- Develop security policies, risk assessments, and the company-wide risk register.
- Lead access reviews, security awareness initiatives, incident response preparedness, and incident coordination.
- Own corporate IT security, including device management, identity providers, SSO, SaaS access controls, and employee lifecycle processes.
- Oversee privacy operations, data processing agreements, cross-border data transfers, and vendor security assessments.
- Manage enterprise customer security questionnaires, audits, reviews, and customer-facing security documentation.