• Own internal IT systems including identity management, device management, endpoint security, and SaaS tooling. • Lead SOC 2 and other compliance programs, including audit readiness, evidence collection, auditor coordination, and remediation. • Design, implement, and maintain security controls such as access controls, encryption, logging, and vulnerability management. • Develop and maintain security policies, procedures, and documentation aligned with frameworks such as SOC 2, NIST, and ISO 27001. • Manage identity lifecycle processes, including onboarding, offboarding, and access reviews using least-privilege principles. • Evaluate, select, and implement IT and security tools (MDM, EDR, SSO/IdP, DLP, logging). • Oversee vendor security reviews and third-party risk management. • Partner with engineering and operations to ensure secure configurations across cloud infrastructure and SaaS applications. • Participate in incident response activities and drive continuous improvement from security events. • Automate IT and security workflows where possible to improve efficiency and reliability.