Reporting to the Senior Manager, Information Security Governance Risk and Compliance, this role is responsible for performing information security risk assessments, third-party security reviews, policy administration, control assurance, compliance support, remediation tracking, and operational reporting. The position works closely with IT, Legal, Privacy, Procurement, Quality, Internal Audit, business stakeholders, and Global Information Security to ensure information security risks are identified, documented, communicated, and managed in alignment with enterprise requirements.