['Compliance Management', 'Information Security Budgeting and Procurement Management', 'Manage GRC Program', 'Capacity Building and Training', 'GRC Program roadmap', 'Recruitment', 'Current Security Posture Evaluation', 'Team management', 'Direction and leadership', 'Vendor Management', 'Incident Response and Crisis Management', '3rd party Risk Management', 'Security Awareness Program Implementation', 'Policy and Procedures Review & Development', 'Compliance and Regulatory Alignment', 'Define GRC Program', 'Strategy Development']