Define and execute cybersecurity strategy. Lead Security group (Enterprise IT Security, AppSec, TDR, GRC). Oversee risk management, policies, and controls (SOC 2, SOX, ISO 27001). Drive secure-by-design principles across infrastructure and applications. Own incident response program. Oversee vulnerability and patch management. Advise on data security and privacy. Manage vendor and custodian risk. Develop security training and awareness programs. Report technical risk to leadership and the board.