Background: Big 4 IT audit (KPMG, EY), founded an IT audit function, then led GRC and security programs in-house: SOX/ITGC, SOC 2 readiness, PCI DSS 4.0, HIPAA, CMMC/NIST 800-171, third-party risk, and a full security program rebuild after a ransomware attack. CRISC, CISM in progress. Target: Director or Senior Manager in IT GRC, security risk, TPRM or BISO. Remote (US) or Philadelphia. Example role I’m going after: Director, Security Risk at a large healthcare company (remote, $135–249K): owns the security risk roadmap, builds the team, third-party risk and cyber risk quantification at enterprise scale, executive risk reporting. Where I’d love feedback: 1. I’m getting interviews but not closing, and quick rejections on some applications. Does anything on the resume look like a red flag? 2. My last few roles were shorter tenures. How would you present that? 3. Does the summary come across as Director-level, or more hands-on Senior Manager? 4. Any keywords you’d expect to see for these roles that are missing? Thanks in advance. Happy to return the favor on anyone else’s resume.