Manages information security risks and ensures compliance. Collaborates with stakeholders and promotes a security-first culture.