Knowledge/Experience –A minimum of 15 years of progressively responsible experience in information security, cybersecurity, technology risk management, information technology, or related financial-services risk disciplines, including at least five years in a senior leadership or management capacity. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.