Test controls in one or more technology programs, such as threat intelligence, security operations, incident response, endpoint and network security, data protection, penetration testing, application security, vulnerability and patch management, IAM, cloud, IT operations, change management, Secure SDLC, or business continuity and disaster recovery. Demonstrated ability to independently lead configuration-focused audit testing in at least one of these areas: (1) CyberArk/PAM, Active Directory architecture, firewalls, segmentation, or network security; or (2) cloud security architecture/WAF, SIEM/XDR/SOAR, DLP, encryption/key management, or vulnerability management.