Leads cybersecurity governance, risk, and compliance activities, including risk assessments, security policies, ISO 27001 and NIST alignment, ISMS management, audits, data protection, access reviews, security awareness, incident response testing, and business continuity/disaster recovery planning. Manages third-party security risks, supports GRC tools, and provides reporting to leadership and regulators.