Carved out new role, where to start?

I recently graduated from WGU and managed to carve out a security role in my current organization (Hospitality/Gaming). I have some simple systems in place such as endpoint protection and monitors for new devices/connections on the network, as well as running nmap scans and such to check for unnecessary vulnerabilities and performing system hardening on our devices among other things. What are some key 'must haves' to work on getting set up in an environment in which security is a …

check connections current cybersecurity devices endpoint endpoint protection gaming hospitality managed network nmap organization performing protection role running scans security simple start system systems vulnerabilities