Lead and own Security Operations: manage SOC monitoring, incident response, vulnerability management, security tools, IAM/IGA, and cloud security. Build standards, run tabletop/Purple Team exercises, oversee forensics and vendor risk, recruit and mentor the security team, manage budget and compliance (PCI, NIST, ISO), and drive DevSecOps and security champion programs across the organization.

Design, implement, and govern enterprise cloud and hybrid security architectures (primarily AWS). Perform security reviews, assessments, threat modeling, IaC and application security, incident response, and compliance support. Partner with DevSecOps, engineering, and compliance teams to embed secure practices across CI/CD, containers, databases, and network infrastructure.