Lead strategic cybersecurity advisory engagements to assess current-state capabilities, define target-state operating models, and develop multi-year cybersecurity and GRC strategies, transformation roadmaps, and prioritized investment plans aligned with business risk and frameworks such as NIST CSF, NIST 800-53, and ISO 27001. Experience developing cyber asset intelligence, asset management, or attack surface management capabilities, including asset discovery, ownership, classification, criticality, vulnerability and exposure management, and integration of asset intelligence into cybersecurity risk decisions.