Technical depth
Check depth on cataloguing and lineage tooling: Collibra, Alation or Purview, DAMA-DMBOK domains, master data matching rules, retention schedules, and how they defined data quality dimensions and thresholds.
Evidence to listen for
- Command of the specific attack surface, tooling, and controls the role covers
- Understands how the underlying system works, not just how the tool reports on it
- Can explain an attack or control chain end to end
- Distinguishes what they found themselves from what a scanner flagged
Five-point scoring guide
Tool operator only; no understanding of the systems underneath.
Runs tooling but cannot explain findings or how the attack works.
Solid working knowledge; depth thins outside familiar tooling.
Strong command of the domain; explains attack and control chains clearly.
Names specific catalogue and lineage implementations, quality rule sets they authored, and reference or master data models they governed end to end.