Risk assessment: Perform risk assessments and identify and prioritize risks to information security and cybersecurity including SaaS Security Audit Compliance: Ensure compliance with regulations and policies, and assess compliance against industry frameworks, including ISO 27001, SOC 2 Security controls: Implement and monitor security controls, and test their effectiveness, Create Risk Register Documentation: Document and report on compliance levels, control failures, and gaps Training: Train