Build and maintain automation and integrations for continuous control monitoring and evidence collection. Run and coordinate SOC 2, ISO 27001, and SOX audits, map controls, track remediation, and maintain audit-ready documentation. Conduct risk assessments, manage the enterprise risk register, support third-party risk, and partner with engineering and business stakeholders to translate compliance into engineering-focused controls and tooling.