Conducts comprehensive information security assessments for clients through interviews, policy reviews, and evaluation of physical and operational controls. Independently manages assessment lifecycles, multiple deadlines, documentation, reporting, and remediation planning. Communicates findings to technical and executive audiences, advises on security controls and regulatory standards, and maintains technical expertise. Requires regular onsite travel, including 2–3-night trips typically 1–2 times monthly.