Own recurring GRC workflows including third-party risk assessments, customer security requests, security awareness, access reviews, audit evidence collection, and risk and policy tracking. Coordinate with cross-functional stakeholders, maintain audit-ready records, support SOC and ISO assessments, identify remediation needs, and improve or automate GRC processes using approved tools and AI while protecting confidential information.