Enhances ISMS, leads risk management, implements compliance, and supports audits. Develops security awareness and coordinates projects.