Lead the end-to-end information security program, focusing on SOC II and ISO 27001 compliance and security architecture hardening. Design and automate security controls across the SaaS estate and manage incident response and vulnerability management.