Manage GRC initiatives covering security policies, SOC 2 Type 2, IT controls, data governance, internal risk assessments, remediation, and third-party vendor risk. Own trust management platforms, automate controls and evidence collection with AI, coordinate external audits and client security assessments, monitor compliance frameworks, and partner across Legal, Security, Engineering, Sales, and IT to improve scalable processes and employee awareness.

Own and scale IT General Controls across NetSuite, Workday, Salesforce, and related enterprise applications. Lead access governance, segregation-of-duties processes, change management, audit readiness, evidence collection, and remediation. Partner with Internal Audit, External Audit, Security, Finance, and application owners on SOX compliance. Develop AI-native continuous controls monitoring, automated testing, anomaly detection, and governance for internal AI systems while modernizing the broader controls environment.

Lead and deliver vulnerability management and security operations programs across security, AIT, R&D, infrastructure, and GRC. Define strategy, run prioritization, expand detection and remediation coverage, build AI-driven security workflows and dashboards, manage vendors, budgets, audits, and stakeholder communications to harden the SDLC and scale security for an AI-native company.