• Lead a team of security engineers and analysts protecting Lakeshore across vulnerability management, incident detection and response, and identity and access management • Shape security strategy while partnering across the business to reduce risk and develop a sustainable security program • Drive execution of multi-year security initiatives, translating strategy into execution and maintaining progress amid shifting priorities • Partner with senior stakeholders/leadership to develop and maintain information security policies, procedures, GRC, and plans • Evaluate security technologies and controls, overseeing implementation and continuous improvement efforts to strengthen security posture • Identify the root causes of technical and operational problems, leading the team to sustainable solutions

• Own the product strategy for this market: who we're building for, what problems we solve, how we're differentiated • Lead market and customer discovery with developers, engineering leaders, and security teams to find real signal • Test hypotheses around buyers, pricing, and packaging — iterate fast • Build and drive the roadmap, translating customer insight into a prioritized backlog • Partner with sales and leadership to shape GTM: positioning, pricing, and the sales motion for a new buyer • Define what success looks like and track the signals that tell us the market bet is working

• Perform troubleshooting in the environment to identify the root cause of issues and/or demonstrate the absence of errors/blocks on security and network assets such as: NG Firewall, WAF, ZTNA, VPN, IPS, SIEM, EDR, routing, and cloud provider security tools; • Monitor and respond effectively during incidents; • Participate in and contribute to security risk management; • Use your security experience and knowledge to identify threats in corporate environments and propose mitigations; • Develop creative solutions for complex security problems that balance business needs and risks; • Strong focus on task automation.

• Manage security governance programs, SOX IT controls coordination, customer and vendor security reviews, client-facing security engagements, regulatory and compliance assessments, and cross-functional security initiatives. • Act as the single point of contact (SPOC) for security governance matters across Conifer, ensuring alignment with enterprise security requirements, client obligations, regulatory standards, and business objectives. • Lead Conifer’s security governance activities, ensuring adherence to corporate security policies, regulatory requirements, and industry best practices. • Coordinate and manage SOX IT General Controls (ITGC) activities, control testing, remediation efforts, evidence collection, and audit support. • Support internal and external audits, including SOX, SOC, client audits, and regulatory assessments. • Track compliance initiatives and monitor remediation activities through completion. • Facilitate governance forums and provide regular updates to executive leadership. • Serve as the primary security representative for client security inquiries, assessments, and due diligence activities. • Lead customer security reviews, questionnaires, RFP/RFI responses, and security presentations. • Build trusted relationships with client security, compliance, legal, and technology stakeholders. • Partner with Sales, Client Services, and Operations teams to address customer security requirements during contract negotiations and ongoing service delivery. • Manage Conifer’s third-party security risk management processes. • Conduct security reviews and risk assessments for vendors, partners, and service providers. • Coordinate remediation plans with vendors and internal stakeholders. • Ensure compliance with vendor security requirements, contractual obligations, and client expectations. • Maintain vendor security risk documentation and reporting. • Serve as Conifer’s primary liaison to Tenet Enterprise Security, Risk, and Compliance organizations. • Coordinate the adoption and implementation of enterprise security initiatives across Conifer. • Ensure alignment between Conifer-specific requirements and Tenet cybersecurity standards. • Identify, assess, and monitor information security, operational, and third-party risks. • Support enterprise risk management activities, risk reporting, and mitigation planning. • Track security findings and corrective actions through closure. • Assist in the development and maintenance of security policies, standards, and procedures. • Develop executive-level reporting, dashboards, and risk metrics. • Present security program status, compliance updates, and risk assessments to senior leadership. • Drive cross-functional collaboration among Security, Compliance, Legal, Operations, Technology, and Client Services teams.