Own and mature the company’s DevSecOps and cloud security function. Responsibilities include implementing SOC 2 controls, automating compliance evidence, managing cloud security posture and runtime security, embedding security gates into CI/CD, leading vulnerability remediation, developing auto-remediation and AI-assisted workflows, and securing infrastructure through Terraform and policy-as-code. The role also partners with GRC and corporate security teams while building reusable security tooling and developer-platform guardrails.

Lead and build the DevSecOps function: implement SOC 2 controls, automate compliance and evidence pipelines, own cloud security posture, CI/CD security gates, vulnerability management, and AI-assisted auto-remediation to embed security as code across the developer lifecycle.