control testing , Servicenow, Apis, Vulnerability Management, JIRA, Microservices, Gcp, Azure, AWS, OCC expectations, cloud-native systems, Iso, cloud platforms, DevSecOps practices, regulatory and compliance frameworks, Audit Support, GRC platforms, PCI-DSS, CI CD pipelines, remediation tracking, nist, application security tools, modern engineering architectures