The ideal candidate combines sound professional judgment, strong IT controls knowledge, willingness to test or review lower risk non-IT controls, clear communication, and the ability to manage multiple concurrent assignments while coaching junior team members. Experience developing and maintaining risk and control matrices (RCMs) during engagement planning, including documenting processes, identifying relevant risks, mapping controls to risks and engagement objectives, and defining appropriate control testing procedures.