CISO said she has a regulatory matter for a few years, as part of wrap up needs remediation - 6 work streams ( Data Inventory, SDLC, Logging and Monitoring, Training).
Some or small and large - needs program / pm manager - with security lens understanding. security technical project manager