Deep understanding of identity-governance processes and controls, including joiner-mover-leaver, access requests and approvals, provisioning and deprovisioning, UAR and certifications, roles and entitlements, segregation of duties, least privilege, exception management, auditability, and control evidence. Define and report meaningful metrics, key performance indicators, and risk indicators, including campaign completion and timeliness, exception volume, remediation aging, access-removal effectiveness, data-quality trends, orphaned ownership, workflow and integration health, control performance, and vendor service levels.