Lead and mature the enterprise information security program across governance, risk management, compliance audits, incident response, vendor risk, data protection, security awareness, and cloud security. Coordinate SOC and HIPAA assessments, maintain policies and risk registers, oversee remediation and incident response, and advise leadership on Microsoft 365, Azure, AI, and emerging technology risks.