• Own the Security Program — End to End • Design and own GenLogs’ company-wide information security strategy • Define the security roadmap under constrained resources • Set enforceable security requirements across engineering, operations, and corporate IT • Maintain independence from DevOps while collaborating closely with them • Serve as the final authority on security risk acceptance • Identify and Protect Existential Assets (Day-Zero Focus) • Own IAM strategy across all systems • Enforce least-privilege, role-based access, MFA, and privileged access reviews • Define what incident response looks like before it happens • Build and maintain a phased execution plan • Own SOC 2 end-to-end • Ensure compliance does not degrade operational velocity • Brief the C-suite clearly on risk tradeoffs and consequences • Position GenLogs for more sensitive enterprise and government work