Design, standardize, and automate the IAM lifecycle and workflows. Integrate and maintain IdP connections, drive RBAC/least-privilege adoption, automate provisioning/deprovisioning, resolve identity incidents, document processes, and partner with stakeholders to establish IAM governance.

Lead product and application security by partnering with product and engineering to design secure features, perform code and architecture reviews, build AI-native security tooling, create developer guardrails, and support incident response, vulnerability management, and penetration testing to scale Headway's security program.

Lead and mature Headway's GRC program across certifications (HITRUST, SOC 2, PCI-DSS, HIPAA), third-party risk, security awareness training, and technical risk management. Manage audit readiness, vendor assessments, risk register, and cross-functional embedding of compliance. Build repeatable, AI-enabled processes and coordinate remediation and assessor activities.