Owns the security posture and compliance of corporate and CUI systems. Maintains security documentation, implements NIST, RMF, and CMMC controls, supports DCSA reviews and audits, monitors Microsoft 365 and AWS environments, manages identity and endpoint security, coordinates user training, and oversees secure development scanning. The role also assesses Windows, Active Directory, and Linux hardening, supports access management and patching, and reports cybersecurity risks to leadership.