Supports the Governance, Risk, and Compliance program by monitoring compliance, managing third-party risk, maintaining risk registers, responding to security questionnaires and RFPs, updating policies, and leading SOC 2, ISO 27001, and DORA audits. The role coordinates cross-functionally, tracks control performance and remediation, prepares leadership reports, and maintains compliance evidence and documentation.

Leads Parallels’ governance, risk, and compliance program, including third-party risk management, customer security questionnaires, policy development, risk registers, control testing, audit readiness, and external audits. Oversees compliance with frameworks such as SOC 2, ISO 27001, NIST, FedRAMP, and CMMC. Owns security and privacy incident processes, regulatory reporting, Trust Center operations, employee training, and risk remediation. Partners cross-functionally with Security, Legal, IT, HR, Engineering, and Sales while managing and developing GRC analysts.

Provides senior legal and compliance guidance to Product and Engineering teams for software and AI products. Advises on privacy, security, intellectual property, export controls, sanctions, regulatory compliance, customer trust, licensing, and commercial agreements. Builds scalable legal review processes, supports incident and audit responses, protects innovations, negotiates product-related contracts, and translates complex legal and technical requirements into practical business guidance.