• Serve as the regional operations lead for data center physical security in Australia: run site security programs, coordinate with site operators and contract guard forces, and own in-region incident response and escalation • Administer and operate the region's electronic security systems access control, video management (VMS), intrusion detection, and visitor management including configuration, health monitoring, and lifecycle management • Design and document security systems architecture: device schedules, integration points, data flows, and network topology for security infrastructure at new and existing sites • Build and maintain integrations that bring security data sources (video, access events, alarms, sensors) into centralized monitoring and analysis platforms • Support construction-phase security for new builds and modular deployments in region: design reviews, commissioning of security systems, and security gates before handover • Manage regional security vendors and integrators scoping, delivery quality, and accountability • Write and maintain the operational backbone: post orders, standard operating procedures, and audit-ready documentation for regional security controls • Provide after-hours coverage and structured handoffs to US-based teams as part of follow-the-sun security operations

• Own Filevine’s FedRAMP 20x Moderate strategy, delivery plan, certification readiness, and ongoing compliance posture. • Lead the design and execution of FedRAMP evidence automation, continuous monitoring, and reporting required for Marketplace certification and sustained authorization. • Serve as the single-threaded owner for FedRAMP engagements with 3PAOs, the FedRAMP PMO, agency stakeholders, and internal executive sponsors. • Set the roadmap and priorities for dedicated FedRAMP engineering resources, ensuring regulatory requirements become shipped technical controls, automated evidence, and operationally sustainable processes. • Own POA&M governance, risk acceptance workflows, certification readiness reporting, and remediation planning across product and platform teams. • Ensure FedRAMP implementations are pragmatic, risk-based, technically grounded, and appropriately scoped for Filevine’s architecture, maturity, and business priorities. • Provide clear, consistent executive reporting on progress, risk, tradeoffs, dependencies, resourcing needs, and certification readiness. • Drive governance for vulnerability findings from scanning tools, penetration tests, customer reviews, audits, and bug bounty programs, including risk adjustment, remediation ownership, escalation, and executive tradeoff decisions. • Maintain a single source of truth for security/compliance status, control gaps, remediation commitments, and customer-facing trust claims. • Ensure trust center materials, customer security responses, sales enablement messaging, and public compliance claims are accurate, current, and defensible. • Translate privacy obligations and customer commitments into product, engineering, and operational requirements. • Support AI and data governance efforts by ensuring privacy, security, and customer trust requirements are reflected in product and operational decisions. • Drive alignment between compliance goals, engineering capacity, product strategy, customer commitments, and business risk.

• Collaborate within the security engineering team to design and implement security tooling. • Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code (Terraform). • Create and support CI/CD pipelines using GitHub Actions to enable reliable, automated deployments. • Collaborate with engineering teams on architecture, reliability, and continuous improvement. • Partner with software development teams to ensure effective adoption of security tools. • Implement monitoring, logging, and alerting to improve system reliability and visibility. • Support resilience through capacity planning, performance tuning, disaster recovery, and runbooks. • Troubleshoot issues efficiently and communicate outcomes clearly. • Deliver production-ready systems on time and within budget.

• Own and evolve GameChanger's multi-year security and technology strategy, including prioritization, resourcing decisions, alignment to business and parent company goals, and communication of security investments and tradeoffs to technical and executive leadership. • Lead, mentor, and grow a team of security and technology operations professionals, including setting priorities, coaching teammates, managing performance, creating opportunities for growth and impact, and creating an environment to support autonomy and ownership. • Own the direction and delivery for all key areas of information security, including product and application security, cloud security, AI security, security operations, vulnerability management, and governance, risk, and compliance functions. • Evaluate and mitigate risks across infrastructure, product, and corporate environments. • Set direction for AI security and governance as part of a secure SDLC and corporate environment, including the secure adoption of AI tooling, the security of AI-enabled product features, and AI usage governance, partnering with AI enablement and governance stakeholders across the company. • Lead the governance, risk, and compliance program, including internal assessments (for example, NIST CSF 2.0), external assessments, and clear risk reporting to leadership. • Own the security operations and incident response program for the GameChanger environment, including detection, on-call, escalation, and coordination with our parent-company security function. • Own internal technology operations, including the technology support function for our remote-first workforce and the systems and endpoints employees rely on to do their work. • Manage the BISO relationship with DSG, including decision rights, shared-services integration, and the partnership with the DSG CISO. • Lead the cross-departmental security steering committee and represent security and technology in executive forums, building alignment and buy-in for key initiatives. • Educate and influence the broader company on security principles, threats, and practices.