This role oversees IT risk governance, security, and compliance, ensuring that policies, controls, and reporting mechanisms effectively manage operational