Advanced hands-on experience across GRC domains and platforms, including multiple areas such as: Risk Management - enterprise and IT risk assessments, risk methodology design, risk register governance, risk appetite and tolerance, qualitative or FAIR-based quantification, treatment planning, KRI design, and executive risk reporting. Compliance Program Management - complex regulatory and framework gap assessments, controls mapping, audit and certification readiness, evidence and remediation governance, and sustainable compliance operating models across frameworks such as SOC 2, ISO 27001, FedRAMP, HIPAA, PCI DSS, DORA, or SOX ITGC.