• Establish and manage a structured program governance framework, including cadence, reporting, and decision-making protocols • Develop and track an integrated program plan aligned to implementation phases • Ensure adherence to key milestones, timelines, and delivery outcomes • Act as the primary liaison across internal stakeholders, leadership teams, and external vendors • Facilitate status meetings, working sessions, and steering committees • Provide oversight and validation of vendor execution plans • Review system configurations, design decisions, and integration approaches • Ensure alignment between system capabilities, operational workflows, and business requirements • Identify, track, and mitigate risks, issues, and dependencies • Drive escalation management and timely resolution • Provide structured reporting on program health, risks, and key decisions • Enable visibility and support executive-level decision-making

• Assess the security and compliance of client firms against regulatory and industry requirements • Conduct audits/assessments including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews • Prepare and review assessment reports • Educate and interpret compliance activities for clients • Manage priorities and tasks to achieve delivery utilization targets • Ensure quality products and services are delivered on time • Collaborate with project managers, quality management and/or other delivery team members to drive customer satisfaction

• Leads audits and assessments including audit planning, evidence review, controls evaluation, and client interviews. • Prepare relevant frameworks assessment reports and attestations. • Manage priorities, tasks and hours on projects in coordination with project managers to meet delivery utilization targets. • Ensure all deliverables meet Coalfire quality standards and timelines. • Proactively escalate client or project risks to management.Interface with clients throughout the engagement, including executive and technical stakeholders • Build and maintain strong, collaborative client relationships • Maintain industry certifications and deepen subject matter expertise through continuous professional development. • Travel up to 30% as required

• Advising clients on data protection requirements (e.g., under the EU General Data Protection Regulation (GDPR)) • Supporting the implementation and further development of information security management systems (ISMS), e.g., according to ISO/IEC 27001 • Conducting data protection impact assessments (DPIAs) • Creating and maintaining records of processing activities and policies • Performing audits and gap analyses • Contributing to our academy: supporting the creation of training materials and the development of learning content in the areas of data protection, information security, and AI • Assisting in the handling of data protection incidents