['Risk assessment reports', 'Manage GRC Program', 'Testing strategy and evaluation criteria', '3rd party Risk assessment reports', 'Team management', 'Training material', 'Recruitment', 'Information Security Budgeting and Procurement Management', 'Define GRC Program', 'Current Security Posture Evaluation', 'Policy and Procedures Review & Development', 'Security Awareness Program Implementation', '3rd party Risk Management', 'Compliance Management', 'GRC Program roadmap']