Manage and improve governance, risk, and compliance programs; lead SOX, SOC, PCI, and NIST audits; assess controls, security risks, vendors, privacy compliance, and remediation; respond to customer questionnaires; and modernize GRC through automation, integrations, continuous monitoring, and data-driven reporting.

Lead investigations and incident response using SIEM and SOAR, design detection alerts, perform threat hunting across endpoints, network, application and logs, analyze compromises and malware, build playbooks and security tools, share findings to improve product/security posture, and mentor junior team members.