Lead day-to-day GRC operations: manage audits and certifications (SOC 2, ISO 27001/42001), maintain risk register and controls, coordinate assessments and evidence collection, support customer security questionnaires and due diligence, partner with Engineering to implement technical controls, and build scalable governance processes.