Manage and maintain the ISMS and regulatory compliance (ISO 27001, GDPR, HIPAA); perform security assessments, audits, and risk remediation; author policies and controls documentation; support technical security operations (firewalls, SIEM, endpoint); handle third-party security vetting and questionnaires; drive security awareness and data governance; and implement AI-driven automations to improve security workflows.