in business, engineering, information technology, or related area and 2 years' experience in information technology, audit..., or information security OR 4 years' experience in information technology, business, engineering, audit, information security...