Conduct risk-based penetration tests, assumed-breach exercises, adversary simulations, and purple-team engagements across enterprise systems, applications, networks, identity platforms, and cloud environments. Evaluate preventive, detective, and response controls, validate detection and incident-response effectiveness, and translate technical findings into risk-based remediation recommendations for technical teams, executives, Internal Audit, and the Audit Committee. Build an independent, continuously improving offensive-security assurance program.

The IT Audit Project Lead will conduct independent audits, assess IT security controls, and build relationships with technology leaders while developing knowledge of custom-built systems.