Support and maintain GRC programs including data and system classification, vendor security assessments, SOC 2 audit coordination, policy lifecycle management, and remediation of control gaps across technical and business stakeholders.