li>IT Governance, Risk & Compliance (Public-Company Readiness): Author, implement, and enforce the company's IT policy suite - acceptable use, access control, change management, data classification and retention, incident response, business continuity/disaster recovery, third-party/vendor risk, asset management, and security awareness. Access Governance & Identity: Own identity and access management end-to-end: SSO and MFA, role-based access and least privilege, joiner/mover/leaver provisioning and deprovisioning, periodic user access reviews, and segregation-of-duties controls across financially relevant systems (ERP/CRM).