Cybersecurity Knowledge
Demonstrated experience leading cybersecurity, cyber risk, governance, remediation, vulnerability management, or security program-management work.
Strong understanding of cyber threats, adversary behavior, attack paths, security controls, and risk-based decision-making.
Working knowledge of Red Team operations, threat intelligence, vulnerability management, control validation, and the MITRE ATT&CK framework.
Ability to engage credibly with security engineers and technical subject-matter experts without serving as the primary hands-on analyst.
Program & Governance Experience
Experience building or maturing governance programs, operating models, policies, standards, procedures, and reporting frameworks.
Experience managing cross-functional initiatives, competing priorities, risks, dependencies, and executive stakeholders.
Knowledge of cyber risk management, remediation tracking, assurance practices, evidence validation, and metrics development.
Demonstrated ability to take a process from concept through implementation and continuous improvement.