• Champion the development and implementation of the system-wide risk management function of the information security program to ensure information security risks are identified and monitored• Internally assess, evaluate, and make recommendations to management regarding the adequacy of the security controls for the client's information systems• Lead diagnostic/discovery sessions to understand the security architecture and control implementations toward identifying gaps and developing supporting documentation.• Facilitate, and participate in client interviews and working sessions to assess the operational effectiveness of security control implementations.• Develop policies, plans, and strategies in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.• Assess existing security environments to validate that security implementations remain up to date throughout the life cycle of a system or environment.• Effectively document successful and unsuccessful security control implementations that appropriately reflect testing methodologies and evidence to determine security implementation effectiveness.• Applying cyber compliance/risk management knowledge, control principles, and technical knowledge across cyber risk and compliance engagements.• Prepare high-quality reports detailing issues, making recommendations, and identifying solutions

• Establish a strong partnership with front-line business partners and other stakeholders to ensure third-party security programs, policies, and procedures are effective• Support third-party security risk identification, assessment, evaluation, tracking, monitoring, and mitigation• Define and implement vendor compliance requirements to address current risks and emerging threats• Perform vendor compliance assessments on new and existing vendors• Request & review risk profile to capture the risk of a particular vendor based on the vendor's responses and the architecture review of the deployment of the vendor solution• Escalate material issues and risks to the appropriate stakeholders• Coordinate with other stakeholders on our, privacy, procurement, and corporate IT departments to ensure alignment• Assist in building out a risk and compliance count industry-leading on industry-leading standards• Assist in measuring and monitoring the maturity level of established GRC programs and existing controls• Provide support to the department in responding to the business units regarding day-to-day operational compliance questions• Build and track metrics and reporting for review and presentation.