• Lead program strategy and operations: asset coverage, scanning cadence, prioritization, and measurable risk reduction using Tenable (Nessus/SC/IO) and Snyk. • Integrate Tenable and Snyk findings into engineering backlogs with clear SLAs; partner with SRE, platform, and application teams to drive remediation. • Establish risk-based prioritization (CVSS, KEV, EPSS, exploitability, business criticality) and publish dashboards for transparency to leadership. • Mature patching and configuration baselines; build preventative controls and secure-by-default guardrails. • Coordinate vulnerability disclosure, pen test intake, and threat-driven campaigns for actively exploited CVEs. • Report program health, trends, and exceptions to security leadership and auditors. • Establish clear data ownership and stewardship across critical datasets; define roles, responsibilities, and decision rights. • Define and enforce data classification, access, and usage policies; drive best practices and guard rails for least privilege and segregation of duties. • Operationalize Sentra (DSPM) and Google DLP to monitor data exposure and access risks; drive timely remediation with accountable teams. • Build data lifecycle controls (creation, storage, use, sharing, archival, destruction) and technical guardrails embedded in platforms and workflows. • Ensure compliance with data protection regulations (e.g., PCI, SOX); partner on control design, testing, and evidence collection. • Collaborate with Security, Legal, Privacy, and Data teams to protect data across its lifecycle and enable safe analytics/product use cases. • Develop metrics (DLP incidents, misconfigurations, toxic combinations, stale sensitive datasets, policy violations) and report to leadership.