• Conduct assessments of threats and vulnerabilities • Determine deviations from acceptable configurations or enterprise or local policy • Assess the level of risk and develop and/or recommend appropriate mitigation countermeasures

• Oversee the physical security, environmental health and safety, connectivity, and essential services that power Kasa’s portfolio. • Lead a team responsible for ensuring secure environments, reliable internet service, and efficient utility management across all properties. • Guide security operations, manage vendor relationships, coordinate service setup during property transitions, and drive cost-efficient utility and connectivity solutions at scale. • Report to the Associate Director of Hospitality Operations and support on-site portfolio teams nationwide.

• Manage the end-to-end lifecycle of inbound security questionnaires from partner physician practices. Ensure responses are technically accurate, timely, and reflect our latest security posture. • Lead security evaluations for Aledade’s vendors. Analyze SOC2 reports, penetration test results, and self-assessments to ensure our supply chain meets our rigorous healthcare security standards. • Maintain and optimize our security response repository. You’ll ensure our "Source of Truth" is updated as our infrastructure evolves • Identify bottlenecks in the assessment workflow and implement scalable solutions, such as self-service "Trust Centers" for partners, to reduce the manual overhead of the GRC function.

• Build practical controls to improve the effectiveness and robustness of our engineering team • Foster a DevSecOps culture through education, automation, and tooling. • Secure our SDLC process through automation • Implement checks in pipeline • Perform security reviews of application code • Take part in team on call rotation for security events and monitoring alerts • Advocate and educate security best practices • Create tooling and automation to efficiently respond to security events • Partner with stakeholders to respond and mitigate security threats