• Own, manage, and support the application of key compliance frameworks (SOC 1 and 2, ISO 27001, CSA STAR, NIST CSF, etc). • Develop, control, and maintain applicable organizational policies, procedures, best practices, and guides associated with key compliance requirements and in support of annual audits. • Assist in the development and implementation of an internal audit program designed to measure the effectiveness of organizational processes and procedures, assess organizational adherence to those processes and procedures, identify opportunities for organizational and systemic process improvement, and alert the organization about emerging risks to the comprehensive compliance program. • Support the Risk Management Program making risk-based decisions an integrated part of the cultural landscape, including: risk identification, risk mitigation, risk monitoring, risk reporting, and documentation of risk realization and/or retirement. • Work closely with the Security Operations (SecOps) team to ensure security functions meet operational compliance requirements and will meet/exceed independent annual audit standards. • Ensure technical, operational, and administrative controls are fully operable and meet standards necessary for SOC 1 and 2 audits. • Support Quarterly Access Reviews (QARs) as part of the larger User Access Request process.