• Lead recurring customer security coaching sessions, including tactical reviews, advisement sessions, and executive-level security discussions. • Review threats, incidents, posture trends, identity risks, compliance insights, and Microsoft security telemetry to identify meaningful areas for improvement. • Translate technical findings into clear, business-focused recommendations, roadmaps, and next steps. • Partner with MDR/SecOps, Customer Success Managers, consultants, and analysts to align customer priorities, risks, workstreams, and communication plans. • Help customers improve their understanding of their security environment and the effectiveness of their tools, processes, and controls. • Review and provide guidance across Microsoft security capabilities, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Purview, Conditional Access, MFA, PIM, email security, insider risk, and cloud app governance. • Build and maintain customer-specific security roadmaps tied to licensing, budget, risk priorities, compliance drivers, and measurable outcomes. • Conduct security architecture and adoption planning to help customers optimize the value of their Microsoft tools and licenses. • Analyze security trends and make recommendations related to external and internal threats, including malware, identity-based risk, data leakage, and attack surface reduction. • Prepare advisement materials, tactical decks, quarterly executive summaries, and customer-facing recommendations using evidence from dashboards, analytics tools, KQL queries, reports, and telemetry trends. • Guide client conversations toward additional security enhancements, roadmap initiatives, and continuous improvement opportunities. • Monitor customer security issues, escalations, and requests, validating context and converting learnings into repeatable guidance. • Contribute to playbooks, best practices, and coaching materials while mentoring supporting consultants or analysts as needed.

• Own US customer trust operations: Manage intake, triage, prioritization, and completion of customer security questionnaires, vendor risk assessments, and RFIs for US-based customers. • Respond to customer security inquiries with technical depth: Complete questionnaires accurately, respond to RFIs, and address customer security concerns with responses that demonstrate understanding of Smartsheet's architecture and security controls. • Manage questionnaire queue and ensure SLA compliance: Maintain visibility into pending assessments, track completion timelines, and escalate delays. Keep customers informed of progress and manage expectations. • Build customer relationships and provide security assurance: Become a trusted resource for customer security teams. Understand their compliance requirements, ask clarifying questions, and provide responses that build confidence in Smartsheet's controls. • Support US sales teams: Work with sales and customer success teams to remove security-related deal blockers, provide compliance assurance materials, and accelerate customer buying cycles. • Escalate and collaborate on complex assessments: Identify questions requiring specialized expertise (AI security, FedRAMP, HIPAA, specific control implementations) and escalate appropriately. Work cross-functionally to gather evidence and provide comprehensive responses. • Understand industry-specific compliance: Respond to questions about HIPAA, NIST, state privacy laws (CCPA, etc.), PCI DSS, and sector-specific requirements relevant to customer industries. • Drive process improvements: Identify opportunities to improve questionnaire completion efficiency, update response templates, and recommend changes that benefit the team and customer experience.

• Gather and analyze requirements together with business areas; • Convert functional requirements into technical requirements, preparing high- and low-level architecture documents; • Participate in alignment meetings and requirements-gathering sessions with business users; • Facilitate Fit-to-Standard workshops; • Validate requirements in the system and in the SAP Fiori application library, ensuring end-to-end coverage of functionalities in Solution & Architecture documents; • Execute exploratory testing to ensure consistency of functional design documents; • Update design documents during functional testing, defect remediation, integration testing, and UAT; • Create, review, and update SAP authorization concepts; • Contribute to the creation and review of training materials; • Provide support during Hypercare activities; • Perform other routine activities within the area.

• Support the onboarding of new third-party vendors into the organization's Third-Party Risk Management (TPRM) program. • Review vendor intake requests to ensure required information is complete and accurate. • Coordinate the distribution, collection, and tracking of vendor security questionnaires and assessment documentation. • Monitor vendor assessment progress and proactively follow up on outstanding questionnaires, evidence requests, and documentation. • Maintain accurate assessment records and workflow updates within the ServiceNow platform. • Collect, organize, and maintain vendor security documentation, including policies, certifications, and supporting evidence. • Coordinate remediation efforts by tracking identified security gaps and following up on corrective actions. • Validate vendor security controls and supporting documentation against established security requirements. • Support vendor risk tracking, reporting, and status updates for internal stakeholders. • Assist with daily operational activities within the Third-Party Risk Management program as assigned by the TPRM Manager. • Ensure all assigned work is completed according to established priorities and timelines.