The role will also participate in maintaining and improving the organization's Information Security Management System (ISMS), supporting internal and external audits, risk assessments, security policies, and ongoing compliance efforts aligned with ISO 27001 and other applicable regulatory and security frameworks (e.g., HIPAA, PCI DSS). This role is responsible for the administration, monitoring, and improvement of security technologies, including endpoint protection, SIEM, identity and access management, vulnerability management, email security, web application firewalls, intrusion detection and prevention systems, cloud security platforms, and related security tools.