• Develop and lead AmeriVet’s enterprise information security strategy and roadmap. • Establish and maintain security policies, standards, and governance frameworks. • Partner with IT and business leaders to integrate security best practices into operations and technology initiatives. • Provide regular security risk reporting and recommendations to executive leadership. • Lead the IT/Info Sec GRC program, including risk assessments and control frameworks. • Ensure compliance with PCI DSS requirements and other applicable regulatory standards. • Oversee internal and external security audits, vulnerability assessments, and remediation efforts. • Manage third-party risk management and vendor security assessments. • Oversee enterprise Identity and Access Management (IAM) strategies and processes. • Implement and maintain Single Sign-On (SSO) solutions to improve both security and user experience across veterinary practices and corporate teams. • Establish access governance, provisioning, and role-based access controls across systems. • Oversee security monitoring and endpoint protection platforms including CrowdStrike. • Manage incident response processes, investigations, and remediation. • Partner with infrastructure and cloud teams to implement secure architecture and endpoint protection standards across all AmeriVet locations. • Develop and maintain an enterprise cybersecurity risk management program. • Lead the organization’s security incident response and recovery procedures. • Identify emerging threats and implement proactive mitigation strategies. • Maintain a security awareness program to educate corporate and practice teams on cybersecurity best practices. • Promote a strong security culture across AmeriVet.