• Collaborate with the Third‑Party Risk Management team and the business to evaluate new applications and services, assess security controls, and ensure alignment with enterprise security requirements. • Collaborate with IT teams to enforce security standards that enable secure technology solutions. • Provide security guidance with a holistic view of how security configuration changes impact Security Operations, GRC compliance requirements, and Security Engineering workflows and tooling. • Evaluate proposed application and platform configuration changes from business and Security Engineering teams, analyze their impact on the security posture and architectural standards, and make recommendations. • Support cross-functional adoption of security controls for IaaS/PaaS/SaaS, including reference architectures and guardrails. • Deliver security guidance related to creating and deploying network security controls such as firewall access control lists (ACLs). • Assess changes in the external threat landscape using threat intelligence and collaborate with technology teams to guide the implementation of appropriate defensive controls. • Teach, lead, and influence IT and security teams to incorporate security into enterprise and client-facing projects and applications. • Assist in developing enterprise security standards aligned to industry frameworks (e.g. CIS Critical Security Controls), and partner with the business to ensure controls are clearly understood and effectively applied across technologies and use cases. • Partner with the Cyber Security Product team to evaluate security tools to ensure they meet business needs, security requirements, and architectural standards. This includes assessing integration with existing systems and presenting clear, actionable recommendations to stakeholders. • Use workflow automation platforms to streamline processes, reduce manual effort, and improve operational efficiency.