• Own end-to-end platform security architecture for our AI solutions platform, including identity management, access controls, encryption, and network security. • Design and implement enterprise-grade RBAC (Role-Based Access Control) systems, including integration with client identity providers (Azure Active Directory, Okta, etc.). • Lead our multi-cloud security strategy across AWS (current) and Azure (expansion), ensuring consistent security posture as we scale. • Build and maintain secure infrastructure using Terraform CDK, Kubernetes (EKS/AKS), and modern IaC practices. • Implement secrets management, encryption at rest and in transit, and secure CI/CD pipelines. • Maintain and enhance our SOC 2 Type II compliance program, working with Vanta for continuous monitoring and audit readiness. • Drive ISO 27001 alignment and prepare for certification as enterprise clients require it. • Conduct security reviews of new features, integrations, and client deployments. Establish SLAs and reporting cadences. • Create and maintain security documentation, policies, and runbooks that satisfy enterprise procurement requirements. • Partner with legal and operations on vendor security assessments, client security questionnaires, and DPAs. • Establish security monitoring, alerting, and incident response procedures. Be a key member of the on-call rotation for security incidents. • Lead vulnerability management, including regular scanning, prioritization, and remediation tracking. • Provide weekly security status updates to engineering leadership and contribute to client-facing security communications. • Mentor engineers on secure development practices and conduct security-focused code reviews.