• Perform comprehensive enterprise-wide IT risk assessments and audits, collaborating cross-functionally to identify, prioritize, and mitigate cyber risks and compliance issues. • Develop, implement, and maintain robust IT security policies, procedures, and controls aligned with organizational objectives, industry frameworks (e.g., NIST 800-53), and regulatory requirements (e.g., PCI DSS). • Design and execute engaging security awareness training programs and campaigns to cultivate a security-minded culture. • Create and maintain documentation related to IT risk and compliance activities. • Continuously monitor and evaluate emerging IT risks, regulatory changes, and industry trends to proactively adapt security and compliance controls. • Conduct third-party cyber risk assessments, ensuring vendors and partners align with core cyber and compliance standards. • Establish and maintain a comprehensive risk register, identifying, assessing, and mitigating IT security risks to enhance organizational resilience. • Provide expert guidance to stakeholders on interpreting and implementing company standards and regulatory requirements. • Complete inbound VSQs, RFPs, and RFIs, ensuring comprehensive and timely responses. • Other non-essential duties as assigned or may be necessary.