Supports the Governance, Risk, and Compliance program through cybersecurity audits, control assessments, evidence collection, documentation, compliance monitoring, and remediation tracking. Evaluates PCI, NIST, CMMC, and other security controls for design and operating effectiveness; develops policies and compliance records; explains requirements to technical and non-technical stakeholders; coordinates auditor and customer assurance requests; and reports compliance metrics and remediation progress. Requires advanced security framework knowledge, a bachelor’s degree or equivalent experience, CISSP certification, and six or more years of relevant experience.