• Manage and respond to customer security reviews, questionnaires, and audits • Serve as the primary liaison for security-related inquiries from prospects, customers, and partners • Oversee ongoing compliance initiatives (SOC 2, ISO 27001, 27017, 27018, GDPR etc.) and maintain the risk register • Collaborate with cross-functional teams (Engineering, Sales, Product, HR) on risk management strategies • Evaluate third-party vendors, manage due diligence processes, and coordinate remediation actions • Develop, refine, and maintain security and compliance policies, procedures, and standards • Support and promote security awareness initiatives, including employee training and phishing simulations • Lead and coordinate internal and external audits, ensuring continuous improvement in controls