• Own the organization’s security posture end-to-end. • Define and maintain the security strategy, roadmap and operating model aligned to the business goals. • Establish security policies, standards and secure-by-default guardrails. • Own security exception handling and ensure compensating controls are documented and monitored. • Lead response to security incidents and coordinate internal/external stakeholders. • Implement and oversee controls such as IAM, MFA, least privilege, endpoint security, patching and secure configuration baselines. • Embed security into SDLC and perform/enable threat modeling and security reviews.