Strong practical understanding of NIS2 and cybersecurity governance principles, Experience in information security, cybersecurity, or GRC roles with ownership responsibility, Ability to translate regulatory requirements into workable, effective controls, Experience working across multiple teams and organizational levels, Pragmatic, execution-focused approach with attention to detail