• Led organization-wide information security compliance program by designing and implementing programs to ensure IT activities, processes and procedures align with critical security frameworks (NIST CSF, ISO 27001) and regulations• Developed and maintained comprehensive security policies that drive compliance with industry standards and oversaw policy lifecycle, including updating policy library and employee education efforts• Managed Third-Party Risk program by conducting ongoing security assessments of critical partners and enhanced third-party risk management process• Coordinated enterprise risk assessments through annual security risk assessment, identifyingvulnerabilities, and prioritizing security improvements. Implemented risk process automation for increased efficiency• Obtained and maintained SOC 2 and ISO 27001 certification and ensured compliance with NISTstandards, improving audit readiness and security maturity• Fostered a security-aware culture through company-wide initiatives, including security newsletters,ongoing trainings, and internal events• Streamlined customer assurance efforts by maintaining security assurance package and regularlyrepresented company in information security matters with customers and external auditors on securityinquiries with transparency and clarity• Collaborated with internal stakeholders (Engineering, Operations, Legal, HR) to represent securityprograms and built trust with clients by demonstrating robust security practices