Access Review & Lifecycle Automation: Build and operate the tooling and automation behind the user access review program (SOX ITGC, PCI DSS, SOC 1/2, ISO 27001), which InfoSec GRC owns, and behind joiner/mover/leaver control assurance, including leaver access-reversion evidence, reconciliation against the authoritative HR source, and orphaned account detection. Access Request Governance: Define governance requirements and design patterns for access request workflows across privileged systems (code repositories, databases, infrastructure), including role-based, time-bound, delegated, and just-in-time access, and measure adoption so access is not granted outside the governed workflow.