- Manage and maintain the organizations Information Security Management System (ISMS) and ensure compliance with ISO 27001, SOC 2, GDPR, and other applicable security standards.
- Handle customer security questionnaires, security assessments, and compliance documentation.
- Coordinate with internal teams and enterprise customers to address security and compliance requirements.
- Conduct security risk assessments, identify compliance gaps, and track remediation actions to closure.
- Coordinate internal and external security audits, maintain audit evidence, and ensure timely closure of audit observations.
- Develop, review, and maintain information security policies, procedures, standards, and documentation.
- Conduct vendor and third-party security assessments and monitor compliance with security controls.
- Support security incident documentation, investigations, and corrective and preventive actions.
- Prepare compliance reports, dashboards, and management updates.
- Drive security awareness initiatives and promote information security best practices across the organization.