Control knowledge: Strong understanding of security and IT controls across identity and access management, change management, vulnerability management, incident response, logging and monitoring, backup and recovery, third-party risk, and security governance. The resource will immediately establish controls and ownership, coordinate evidence collection, identify readiness gaps, drive remediation, and manage auditor requests through fieldwork and report completion.