Have or obtain a professional security certification such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified in Governance, Risk & Compliance (CGRC), Certified ThirdâParty Risk Professional (CTPRP), Cyber Supply Chain Risk Professional (CSCRP), Certified Information Privacy Manager (CIPM), within 1 year of employment or promotion. Executes governance, risk, and compliance activities by monitoring adherence to regulatory, contractual, and policy requirements, conducting assessments, managing control evidence, and performing thirdâparty risk reviews.