Lead design and implementation of technology and cybersecurity governance routines. Define KRIs/KCIs, risk thresholds, escalation protocols, and metrics. Integrate governance into SDLC, cloud deployments, and third-party onboarding. Drive risk profiling, control effectiveness assessments, automation, and governance standardization while influencing senior stakeholders and ensuring regulatory and audit alignment.