Manage and coordinate IT compliance assessments (HITRUST, PCI DSS, SOC 2/3, HIPAA, TX-RAMP), serve as liaison with auditors, maintain audit-ready documentation, track remediation, and support cross-functional compliance initiatives and continuous monitoring.

Support and execute audit, compliance, and security assurance activities including evidence collection, control validation, access reviews, security questionnaires, remediation tracking, and process improvement while coordinating across technical and non-technical teams.

Design and implement secure multi-cloud architectures (GCP primary; AWS/Azure supported). Build landing zones, IAM, encryption, and guardrails; integrate security into CI/CD and DevSecOps; support detection/response, vulnerability management, SaaS reviews, and audit evidence for healthcare payment compliance (PCI, HIPAA, HITRUST, SOC2, SOX). Partner with engineering, platform, and GRC teams to operationalize cloud security standards and remediation.