• Develop scalable and sustainable processes and tools for normalized controls, collecting audit evidence, monitoring controls, and conducting gap analyses. • Manage TRM’s existing security compliance and certification lifecycle (e.g., SOC 2 Type II, ISO 27001/27701, FedRAMP, CMMC) while planning for and prioritizing future compliance needs. • Operationalize the GRC program to maintain our regulatory certifications. • Manage customer due diligence requests including developing and maintaining security collateral for customers (e.g., SIG, CAIQ). • Conduct enterprise risk assessments and manage the risk registry. • Develop a vendor risk management program. • Identify areas for improvement based on input from customers, the go-to-market teams, and overall business objectives. Anticipate customer needs with respect to compliance and due diligence.