Working knowledge of cybersecurity programs aligned with a recognized framework (e.g., NIST CSF, CIS Controls), including incident response, vulnerability management, and security awareness training, sufficient to approve and evaluate a partner-delivered program. At least 3 years as the accountable owner of one or more managed service provider relationships, including defining SLAs, managing performance, leading contract negotiations or renewals, and reconciling invoices, with a track record of improving outsourced service delivery.