Must-have

• IT and cyber security controls
• Independent end-to-end assurance reviews
• Regulated financial services environment
• Control gap identification and root cause analysis
• Risk governance and reporting activities

Nice-to-have

• Pragmatic commercial mindset
• Proactive risk culture fostering
• Automated assurance strategy foundations
• Trusted stakeholder relationship building
• Remediation initiative delivery experience