Strong technical knowledge across multiple information security domains, such as vulnerability management, identity and access management, application and API security, cloud security, data protection, security architecture, incident management, and security governance. The role provides independent risk oversight and credible challenge across the enterprise Information Security program, including governance, risk assessments, controls, security architecture and practices, metrics, and issue management.