• Collaborate with Technology and Product teams to conduct security assessments, ensuring code and infrastructure changes align with SOC 2, PCI-DSS, and internal policies. • Automate compliance and control activities such as risk assessments, vulnerability scanning, third party risk management, and control validation. • Create monitoring and detective alerts for security operations, non-compliance, and incident response. • Responsible for maintaining a healthy posture of our security tools and automations. • Provide support for third-party assessments from customers and audit evidence collection and review. • Expand beyond purely identifying gaps and risks, and own the design and implementation of monitoring and remediating them. • Span across multiple security domains, you’ll be able to flex into technical and non-technical roles to drive risk detective and mitigative projects.