- experience in cybersecurity, information security, IT security governance, or risk management.
- experience performing security risk assessments, compliance reviews, or GRC activities.
- experience applying NIST security frameworks, including NIST SP 800-53.
- experience conducting security control assessments and supporting IT audits.
- experience maintaining risk registers, documenting findings, and tracking corrective actions.
- Experience developing security documentation, policies, procedures, assessment reports, and executive summaries.
- Strong written and verbal communication skills with technical teams, business owners, auditors, and leadership.
- Ability to manage multiple security assessments, compliance activities, and competing deadlines