Lead and advance the enterprise IT risk management program by identifying, quantifying, and managing technology risks. Conduct complex risk assessments using NIST CSF and CIS Controls, maintain the IT risk register, drive mitigation and exception processes, build KRIs and executive reporting, enable GRC platforms and automation, and mentor junior analysts while translating technical risk into business context for leadership.