Leads the enterprise information security program, including ISO 27001 certification, SOC 2, risk management, governance, security architecture, vulnerability management, incident response, IAM, third-party risk, and security awareness. Partners with executives, auditors, customers, and regulatory stakeholders while building a security and GRC team. The role requires hands-on implementation of enterprise controls across cloud, SaaS, endpoints, and corporate systems.