Risk and Policy Governance

This role focuses on designing and maintaining risk and policy governance frameworks to align the organization's information security posture with industry standards and regulatory requirements. The position involves developing security policies, conducting risk assessments, and ensuring compliance with frameworks like ISO 27001 and NIST. It also requires supporting audits, evaluating third-party risks, and driving security awareness across the organization.