Lead governance, risk and compliance activities to achieve and maintain security certifications (ISO27001, Cyber Essentials, PCI). Audit controls, perform gap analysis, remediate risks, support third-party security due diligence, and strengthen AWS cloud security policies while partnering with stakeholders to embed security training and continuous improvement.