• Lead and support customer security audits, responding to security questionnaires and demonstrating compliance with security frameworks. • Prepare, coordinate, and manage ISO 27001 audits, including evidence collection, control implementation, and auditor engagement. • Ensure ongoing compliance with HIPAA, NIST CSF, and other regulatory requirements applicable to healthcare data security. • Develop and maintain policies, procedures, and security documentation to meet regulatory and contractual obligations. • Perform gap analyses and risk assessments to identify and remediate compliance risks. • Manage and improve security governance frameworks, ensuring alignment with industry best practices and business objectives. • Conduct third-party vendor risk assessments, ensuring compliance with security policies and contractual obligations. • Monitor security controls, ensuring effectiveness and continuous improvement in alignment with security frameworks. • Support security awareness training initiatives, ensuring employees understand compliance responsibilities. • Stay current on ISO 27001, HIPAA, NIST 800-53, and other relevant standards, translating them into actionable security controls. • Assist in defining security metrics and reporting on compliance status and risk posture to leadership. • Work closely with legal, security, IT, and business teams to align compliance requirements with security operations.