Design, standardize, and automate the IAM lifecycle and workflows. Integrate and maintain IdP connections, drive RBAC/least-privilege adoption, automate provisioning/deprovisioning, resolve identity incidents, document processes, and partner with stakeholders to establish IAM governance.

Lead and mature Headway's GRC program across certifications (HITRUST, SOC 2, PCI-DSS, HIPAA), third-party risk, security awareness training, and technical risk management. Manage audit readiness, vendor assessments, risk register, and cross-functional embedding of compliance. Build repeatable, AI-enabled processes and coordinate remediation and assessor activities.

Lead product and application security efforts by partnering with product and engineering to perform security design and code reviews, build automated application security tooling and guardrails, audit vulnerabilities, and assist with incident response, vulnerability management, and penetration testing to scale secure development practices across the company.