Audits IT controls to assess compliance with regulatory requirements and effectiveness of administrative, physical, and technical controls.

Conducts vulnerability assessments and penetration testing to identify risks in networks, systems, and applications using automated and manual methods.