Who you are 5+ years in security engineering or GRC, with time in a regulated environment Track record of running security reviews on real initiatives and explaining security clearly to engineers, execs, and auditors.Experience designing and running security programs end-to-end – vulnerability manag