• Ensure the organization complies with relevant regulatory requirements (e.g., GDPR, HIPAA, CCPA/CPRA) and industry standards (e.g., ISO 27001, SOC 2, NIST CSF, PCI DSS). • Develop, implement, and maintain information security policies, standards, and guidelines. • Conduct regular audits and assessments to identify gaps and ensure adherence to compliance frameworks. • Lead in risk assessments to evaluate potential security threats and vulnerabilities. • Collaborate with cross-functional teams to remediate compliance gaps and reduce risks. • Act as the primary liaison for internal and external audits, including regulatory audits, client security assessments, and third-party audits. • Proactively stay up to date with changes in regulatory and compliance requirements, as well as industry trends.