Have the site run on HTTPS
Use WordFence security plugin
Use a paid Security service (optional)
Host the site with a good company
Keep everything in your site updated
Have a backup of the site