• Lead the final phase of Sensiba's Zero Trust transformation and endpoint security modernization. • Develop, document, and maintain enterprise security standards and configuration baselines. • Establish scalable security practices that support long-term growth and compliance. • Manage and optimize Microsoft Sentinel for monitoring, detection, and response activities. • Develop and tune detection rules, alerts, investigations, and automated response workflows. • Lead security investigations, incident response efforts, and proactive threat hunting activities. • Own Defender XDR, Defender for Endpoint, and Defender for Cloud administration and security posture management. • Monitor and remediate vulnerabilities across user devices and cloud environments. • Manage Microsoft Purview Data Loss Prevention (DLP) policies and information protection programs. • Support Sensiba's annual SOC 2 Type II audit process by producing technical evidence and validating controls.

• Develop, execute, and evaluate cybersecurity exercises • Manage cyber threats by monitoring and responding to security incidents • Design and implement security controls for organization’s infrastructure • Analyze malware to understand behavior and defend against it • Simulate cyberattacks to identify vulnerabilities in systems

• Serve as the regional operations lead for data center physical security in Australia: run site security programs, coordinate with site operators and contract guard forces, and own in-region incident response and escalation • Administer and operate the region's electronic security systems access control, video management (VMS), intrusion detection, and visitor management including configuration, health monitoring, and lifecycle management • Design and document security systems architecture: device schedules, integration points, data flows, and network topology for security infrastructure at new and existing sites • Build and maintain integrations that bring security data sources (video, access events, alarms, sensors) into centralized monitoring and analysis platforms • Support construction-phase security for new builds and modular deployments in region: design reviews, commissioning of security systems, and security gates before handover • Manage regional security vendors and integrators scoping, delivery quality, and accountability • Write and maintain the operational backbone: post orders, standard operating procedures, and audit-ready documentation for regional security controls • Provide after-hours coverage and structured handoffs to US-based teams as part of follow-the-sun security operations

• Own Filevine’s FedRAMP 20x Moderate strategy, delivery plan, certification readiness, and ongoing compliance posture. • Lead the design and execution of FedRAMP evidence automation, continuous monitoring, and reporting required for Marketplace certification and sustained authorization. • Serve as the single-threaded owner for FedRAMP engagements with 3PAOs, the FedRAMP PMO, agency stakeholders, and internal executive sponsors. • Set the roadmap and priorities for dedicated FedRAMP engineering resources, ensuring regulatory requirements become shipped technical controls, automated evidence, and operationally sustainable processes. • Own POA&M governance, risk acceptance workflows, certification readiness reporting, and remediation planning across product and platform teams. • Ensure FedRAMP implementations are pragmatic, risk-based, technically grounded, and appropriately scoped for Filevine’s architecture, maturity, and business priorities. • Provide clear, consistent executive reporting on progress, risk, tradeoffs, dependencies, resourcing needs, and certification readiness. • Drive governance for vulnerability findings from scanning tools, penetration tests, customer reviews, audits, and bug bounty programs, including risk adjustment, remediation ownership, escalation, and executive tradeoff decisions. • Maintain a single source of truth for security/compliance status, control gaps, remediation commitments, and customer-facing trust claims. • Ensure trust center materials, customer security responses, sales enablement messaging, and public compliance claims are accurate, current, and defensible. • Translate privacy obligations and customer commitments into product, engineering, and operational requirements. • Support AI and data governance efforts by ensuring privacy, security, and customer trust requirements are reflected in product and operational decisions. • Drive alignment between compliance goals, engineering capacity, product strategy, customer commitments, and business risk.