Conduct risk assessment for existing and new information assets including but not limited to software assets, AI assets, cloud assets, endpoints, network and use GRC platforms (e.g., Hyperproof, ProcessUnity) to manage risks, obligations, assessments, evidence, and findings, and maintain accurate, complete data. You will also support security awareness training content and delivery, including Hoxhunt phishing campaigns, support third-party vendor and software risk assessments, and support NIST 800-171 and ISO 27001 audit and compliance tracking.