In-depth knowledge of processes for identifying and evaluating risk, as well as measurement, monitoring and reporting frameworks.