Designs, implements, and maintains security controls for EliseAI’s systems, applications, cloud infrastructure, data, and users. Responsibilities include automating asset, vulnerability, and patch management; adopting developer security tooling; embedding secure application primitives; strengthening AWS security; guiding secure development; assessing and remediating vulnerabilities; communicating risk; and overseeing security documentation and initiatives.

Lead and scale the company's GRC program across SOC 1/2, PCI, HITRUST, HIPAA and ISO; manage audits and auditor relationships; build and mentor the GRC team; run vendor risk management and DDQ reviews; own security and compliance policies and partner with Legal and Security on contractual obligations.