• Lead assessments and audits of security and IT control environments • Design, implement, and mature cybersecurity and compliance programs • Develop risk registers, conduct risk assessments, and track remediation efforts • Create and refine policies, standards, and procedures that align with top frameworks (SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST, and more) • Guide third-party vendor risk management programs • Prepare clients for internal audits and external assessments • Translate technical, regulatory, and business requirements into clear, actionable solutions • Mentor junior analysts and contribute to the growth of our GRC practice.