Technology stack: Hands-on ability to read and evaluate configurations, security parameters and role/access designs across Windows and Linux, Active Directory/Entra ID, Oracle and SQL Server databases, ERP and financial applications (e.g., SAP, Oracle, JD Edwards) and AWS/Azure cloud; to evaluate change management in Git-based, CI/CD and SaaS release environments; and to interpret vulnerability scanning, SIEM and identity governance outputs. AI and agentic AI in audit: Hands-on ability to design, configure and validate AI- and agent-assisted test procedures (e.g., evidence extraction, attribute testing) and evidence their accuracy, completeness and audit trail; working knowledge of how generative and agentic AI tools operate (LLMs, retrieval-augmented generation, tool/API use, agent orchestration) and of their limitations (hallucination, incomplete extraction, inconsistency, data leakage); familiarity with The IIA's AI Auditing Framework and the NIST AI RMF.