• Design and support end-to-end lifecycle of workforce identity systems including identity automation, access management, and least-privilege enforcement across internal systems • Support design of secure identity design patterns for product teams building on ValonOS • Manage and evolve Valon's IdP in conjunction with IT including SSO integrations, MFA policies, conditional access rules, and directory synchronization • Define and enforce RBAC and group-based access policies for internal applications, cloud environments, and development tooling • Support privileged access management (PAM) for internal infrastructure in conjunction with Engineering teams • Design and build AI-assisted workflows that automate and accelerate core IAM operations • Evaluate AI risks across IAM pipelines, ensuring appropriate security controls around data exposure, prompt injection and other threats • Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for data security risks • Support other operational and on-call duties such as vulnerability management, regulatory compliance (SOC 2, CCPA, NYDFS, FTC), policy development, incident response and security reviews.

• Manage and expand Valon's security and privacy compliance program across key frameworks and regulations (e.g., SOC 2, NYDFS Cybersecurity Regulation, FTC Safeguards Rule, CCPA and evolving regulations) • Build and scale modern Security GRC capabilities that leverage AI-enabled tools and processes, reducing manual overhead while optimizing risk and compliance operations • Support AI security standards development and risk processes • Design, develop and monitor technical security controls • Lead audit preparation and management • Maintain and evolve Valon's risk management practices; facilitate risk assessments across teams and track remediation of identified issues to closure • Develop, publish, and maintain security policies, standards, and procedures in partnership with IT, Engineering and Legal • Build and mature Valon's Data Governance program including secure data handling practices • Enhance BC/DR risk management practices and processes • Partner with Engineering and Product to assess security compliance implications of new features, infrastructure changes, and data flows • Manage security compliance, regulatory requirements, and customer-facing due diligence, while supporting operational security activities including advisory reviews, incident management, and issue remediation

• Design and implement secure AI and generative AI architectures across data, model development, deployment, and inference • Embed security controls into LLM, RAG, and agentic AI systems • Guide architectural decisions on data pipelines, model orchestration, APIs, and observability • Design AI auditability and observability solutions to support governance, monitoring, and incident response • Identify and mitigate AI-specific risks (e.g., prompt injection, data leakage, model poisoning, adversarial attacks) • Conduct threat modeling, architecture risk assessments, and AI security testing (e.g., red teaming) for AI systems • Act as a trusted advisor to client leaders on secure and responsible AI adoption

• Designs, deploys, and leads the implementation of Zscaler Private Access (ZPA) solutions, ensuring alignment with enterprise security frameworks and Zero Trust principles. • Develops and maintains ZPA policies, including segmentation and access control rules to enforce least-privilege access. • Leads troubleshooting and incident response efforts related to ZPA infrastructure, identifying root causes and implementing solutions. • Collaborates with global IT, network, application, and security teams to integrate ZPA with legacy and modern systems across hybrid environments. • Monitors, analyzes, and optimizes ZPA performance and security posture, using logs and analytics to identify risks and drive continuous improvement. • Provides advanced technical guidance, training, and mentoring to internal team members. • Maintains and continuously improves documentation related to ZPA architecture, configurations, policies, and operational procedures. • Stays current of emerging threats, Zscaler platform updates, and industry best practices, and proactively implement enhancements to ensure robust cybersecurity defenses. • Supports compliance and audit initiatives, providing advanced knowledge on secure access controls and remote connectivity. • Supports broader cybersecurity initiatives, including integration with SIEM, IAM, and endpoint protection platforms.