• Own and manage Zafran’s security compliance program, including SOC 2, ISO 27001, and other relevant frameworks • Lead the response to customer security questionnaires and vendor security assessments, ensuring timely and accurate completion • Build and maintain Zafran’s internal security controls framework and evidence collection processes • Establish and manage continuous compliance monitoring and validation initiatives • Develop and maintain security policies, standards, and procedures that support both compliance and business objectives • Manage relationships with external auditors and assessors during compliance audits • Drive security awareness training and secure development practices across the organization • Support customer-facing security conversations during sales cycles and onboarding • Monitor regulatory changes and emerging compliance requirements relevant to SaaS platforms • Build scalability into GRC processes through automation and tooling improvements