• Support HSI’s product and DevOps teams in building and operating secure, compliant SaaS products. • Coordinate and execute evidence collection for external audits (e.g., SOC 2, ISO 27001) and internal assessments. • Perform recurring control activities (e.g., access reviews, change reviews, configuration checks) according to documented procedures. • Assist with vendor and customer security questionnaires, RFP security sections, and due-diligence requests by gathering technical details and documentation. • Assist with risk assessments by documenting control gaps, tracking remediation tasks, and ensuring risks are recorded. • Assist with administration of security controls and tooling in SDLC process. • Triage and track security findings from automated tools, working with engineers to prioritize and validate remediation. • Help document configuration standards and runbooks for secure cloud services and application infrastructure. • Support vulnerability management and monitoring of existing security tooling. • Help maintain incident response documentation and capture incident timelines and evidence. • Participate in design discussions and contribute to security awareness materials for product development teams.