Owner of information security, privacy, and data governance programs. Maintain SOC 2 Type II, lead ISO 27001 certification, administer Vanta, run risk assessments, incident response, data governance, and partner cross-functionally to embed security and privacy.