Lead and run enterprise compliance and audit programs (PCI DSS 4.0, SOC 2, ISO 27001, SOX) across multiple business units. Manage external auditors and control-owner relationships, drive continuous audit readiness, track remediation, maintain PCI scope/ISA functions, and integrate a multi-framework Secure Controls Framework into BAU. Provide GRC leadership on architecture and product changes and mature cloud-native compliance practices.