• Own and maintain SOC 2 Type II certification, including evidence collection, control monitoring, and audit coordination • Drive IAL3 compliance readiness and implementation • Manage accessibility compliance (WCAG) requirements • Identify and pursue additional certifications as needed based on customer and market requirements • Coordinate penetration testing cycles and drive remediation with engineering • Maintain a living view of organizational risk and surface it to leadership • Develop and maintain security policies, procedures, and controls • Respond to security incidents with speed and clarity • Respond to customer security questionnaires promptly and accurately • Support sales in security-sensitive enterprise deals • Maintain public-facing trust documentation • Participate in customer security calls and reviews as needed • Partner with engineering to build security into the development process • Provide clear security guidance and timely reviews so teams can ship with confidence • Collaborate with product on security and accessibility features • Work with customer success to address customer security concerns