Establish and operate enterprise governance aligned to nist cybersecurity framework (csf) and nerc cip, including control mapping, maturity assessment, and consistent execution across it, ot, and cloud environments develop and maintain a nist-aligned security maturity roadmap, using nist csf or 800-53 to assess current state, define target state, and prioritize risk-based improvements. 10+ years of experience across cybersecurity, enterprise IT, infrastructure, or OT environments, with demonstrated management of one or more of the following: Security operations, vulnerability management, and patching.