You lead vendor governance, establish measurable service levels, validate staffing and invoices, and hold contracted providers accountable for training, quality, compliance, and corrective actions.
Vulnerability Assessment: Conduct quarterly and ad hoc vulnerability assessment on organization infrastructure to proactively identify and mitigate risks.
Risk Exception Processing: Review, evaluate, and track Digital Security Policy exception requests (DTAP/policy waivers), ensuring business justifications are valid and compensating controls are properly established.