- Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
- 8–12+ years of experience in Information Security, IT Risk, GRC, or Cybersecurity.
- At least 3–5 years in GRC architecture, leadership, or enterprise governance roles.
- Proven experience designing and implementing enterprise GRC frameworks.
- Strong knowledge of regulatory compliance and security standards.
- Experience implementing or managing enterprise GRC platforms.
- Experience working with senior management, auditors, and regulatory stakeholders.