• You will be the sole dedicated security professional, responsible for both defining the strategy and executing the technical work. • Collaborate extensively with the existing technology team (Engineers, Leadership, Helpdesk) to implement all necessary security changes. • Define and champion a comprehensive, multi-year information security strategy aligned with business objectives, risk tolerance, and industry growth. • Own the selection, implementation, and continuous auditing of the NIST Cybersecurity Framework (CSF) across the entire organization. • Develop and present clear, concise security reports, risk posture summaries, and strategic investment requests to Executive Leadership and the Board of Directors. • Lead the formal security risk management program, including top-level risk assessments and prioritization.