Governance, risk, and compliance management
Industry certification(s) such as CISSP, CISM
Understanding of security standards and compliance frameworks
Information security management systems
Security control assurance programs
Supply chain risk assessment frameworks
Contemporary security technologies