Governance, risk, compliance. The advice I've found on HN is really geared specifically towards technologists and software engineers, hence my asking for something more generic.
What experience does the person have in that field? For instance, have they worked at an audit practice (doesn't have to be one of the Big Four)?