5+ years running enterprise programs, PMOs, or cross-functional implementation initiatives with direct ownership of program charters, raid logs, and steering committee reporting
5+ years in cybersecurity GRC, IT audit, or information security compliance, with direct ownership of SOC 2, ISO 27001, or NIST framework certification work