Preferred qualifications include (plusses; not required): CISA, CRISC, CGRC, Security+, ISO 27001 Internal Auditor, or CISM certification, whether in progress or completed. Assists with compliance efforts related to client obligations, outside counsel guidelines, and frameworks such as ISO 27001, CIS, SOC 2, NIST CSF/800-53, GDPR, HIPAA, PCI, or others relevant to the organization.