least one audit-specific certification (e.g. ISO 27001 lead auditor, CISA) You have a good knowledge of information security...
