Minimum of 3 years' work experience demonstrated in information security/technology-related controls assurance, internal audit, or external audit. Preferably with experience in information security-related professional standards such as ISO 27001 or SOC 2. Demonstrates strong project management skills, takes ownership, achieves results, and drives improvement. Establishes strong and strategic relationships while remaining critical and objective.` Driving innovation: experience in generating and driving innovation, engaging with peers on new processes and solutions. Managing change: managing and leading change into other services or products, operating with new business models, and driving standardization and automation. Data and technology: adopting data-driven decision making, leveraging data to create and demonstrate value. Tech savvy, and comfortable and curious about technologies. Results-driven. Planning, organization, and project management. Stakeholder management and effective communication. Quality oriented. Proactive problem-solving and critical thinking. Flexibility and adaptability. Technical proficiency. Integrity and professional skepticism. Ownership and accountability. Continuous learning and development. Fluent in English.