Managing compliance programmes (SOC 2, ISO 27001, HIPAA, FedRAMP, PCI DSS), conducting risk assessments, managing third-party vendor security reviews, maintaining security policies and procedures, supporting audit processes, and tracking remediation of compliance findings.