Conduct third-party security assessments, evaluate vendor controls, document risk findings, automate GRC workflows with Python and agentic coding tools, maintain integrations across ticketing and risk platforms, and develop dashboards and reporting. Partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy to support risk-informed decisions and mature security governance processes.

Supports application security across product and engineering teams by reviewing code, configurations, designs, vulnerabilities, and pull requests. Helps triage and prioritize security findings, provides remediation guidance, develops scripts and automation, and promotes secure coding practices. The role communicates risk to technical and non-technical stakeholders, collaborates cross-functionally, and develops offensive, defensive, and software engineering skills.

Design, build, and operate CIAM backend services for registration, authentication, authorization, and account lifecycle. Implement OAuth/OIDC/SAML/SCIM, develop APIs in Python/Kotlin, integrate identity platforms, automate deployments with IaC and CI/CD, and ensure secure, reliable, high-scale identity operations.