• Define and maintain secure application and infrastructure architecture frameworks, ensuring security is built-in from the outset • Partner with engineering, DevOps, and technology teams to integrate security into SDLC, CI/CD, and data pipelines • Own and oversee the vulnerability management program, ensuring risk-based remediation across all technology assets • Enhance and scale an existing security design review service, providing structured security assessments for new and evolving systems and data • Advocate for security as a service, building tools and processes that streamline secure development and system operations • Act as a security advisor to engineering and technology operations, ensuring security aligns with business goals • Collaborate with the Security Governance, Risk, and Compliance (GRC) team to align technical security requirements with regulatory and commercial requirements • Champion a security-first culture, ensuring technical execution teams understand security risks, standards, and best practices