4-6 years of hands-on experience in Information Security, GRC, risk management or security awareness Strong understanding of security controls, frameworks, and IT processes Experience working with GRC platforms (TrustCloud preferred), JIRA, and BI tools such as Sigma Strong analytical and problem-solving abilities Excellent communication and interpersonal skills Ability to operate in an ambiguous, fast-moving, innovation-focused environment