United Kingdom · Compliance, quality and safety · Lead (8-12 years)

Lead ISO 27001 Auditor / InfoSec Manager

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

See how AI is changing this job, and get the full read by email.

Start my free Automation Fluency module

As a Lead ISO 27001 Auditor / InfoSec Manager, a good place to start on AI-Driven Compliance Automation is Planning Automation Across a Department, a free Future Fluency module at Level 5. You'd practise working out what in your department's work could be automated, what should not be, and what to recommend.

Free to start, no card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, the new skills it asks for, where it leads, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Leading a team? Try this with up to five of them for 14 days, free.

Experience bandLead (8-12 years)
Direct reports3 reports
Reports toDirector, International Information Security
UK framework levelUsually a manager, or the deepest specialist in a team

Also advertised as Information Security Lead · Senior GRC Lead · Compliance Programme Manager

Built on 43,079 real UK job descriptions we analysed · grounded in what real qualifications cover

Two short quizzes about you

1From this job to a course

The qualifications matched to this job

Transcend Level 5 Diploma in Risk Management of Security Operations Transcend Awards · Level 5 · covers 2 of 9 standards

Qualifi Level 2 Diploma in Business Beginners in Cyber Security Qualifi Ltd · Level 2 · covers 2 of 9 standards

ATHE Level 6 Award in Security Risk Management Consultancy ATHE Ltd · Level 6 · covers 3 of 9 standards

GQA Level 5 Diploma in the Practice of Process Safety Management GQA Qualifications Limited · Level 5 · covers 1 of 9 standards

Qualifi Level 5 Extended Diploma in Cyber Security Qualifi Ltd · Level 5 · covers 1 of 9 standards

Pearson BTEC Level 5 Higher National Diploma in Computing for England Pearson Education Ltd · Level 5 · covers 1 of 9 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

Security operations solutions and service management Transcend Level 5 Diploma in Risk Management of Security Operations

Cyber Security Solutions Qualifi Level 2 Diploma in Business Beginners in Cyber Security

Information and Cyber Security ATHE Level 6 Award in Security Risk Management Consultancy

Understand how to comply with the relevant Regulations, Industry Standards and Management Requirements for Process Safety GQA Level 5 Diploma in the Practice of Process Safety Management

Incident Response, Investigations and Forensics Qualifi Level 5 Extended Diploma in Cyber Security

Information Security Management Pearson BTEC Level 5 Higher National Diploma in Computing for England

The future skills this job leans on

AI Fluency working with AI as a thinking partner

AI Governance Fluency using AI responsibly

Automation Fluency building AI into how work runs

Trust Fluency keeping the digital world safe

Your Plan Illustration

Built for Lead ISO 27001 Auditor / InfoSec Manager

6 units that map to this job, from the qualifications that cover it.

Security operations solutions and service management Transcend Awards · covers 2 of 9 standards Level 5
Cyber Security Solutions Qualifi Ltd · covers 2 of 9 standards Level 2
Information and Cyber Security ATHE Ltd · covers 3 of 9 standards Level 6
Understand how to comply with the relevant Regulations, Industry Standards and Management Requirements for Process Safety GQA Qualifications Limited · covers 1 of 9 standards Level 5
Incident Response, Investigations and Forensics Qualifi Ltd · covers 1 of 9 standards Level 5
Information Security Management Pearson Education Ltd · covers 1 of 9 standards Level 5

These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as a Lead ISO 27001 Auditor / InfoSec Manager?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

AI-Driven Compliance Automation
Advanced Cyber Threat Intelligence Integration

Why each one is rising

The future skills this job leans on

AI Fluencyworking with AI as a thinking partner
AI Governance Fluencyusing AI responsibly
Automation Fluencybuilding AI into how work runs
Trust Fluencykeeping the digital world safe

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your Lead ISO 27001 Auditor / InfoSec Manager plan as you set up, starting with the free Automation Fluency module. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

Ready to pay? Subscribe for £70 a month

Keep this read. One email with what AI is changing in this job, the new skills it asks for and where to start free. Nothing else follows unless you confirm your address.

3What this role really is

This job means leading ISO 27001 certification work for a business, running the internal audit programme and keeping it ready for external audit.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

GRC Platforms (e.g., ServiceNow GRC, OneTrust, Archer) Advanced

Configuring modules for risk assessments, designing custom workflows for control monitoring, building dashboards for management reporting, and overseeing evidence collection.

Audit Management (e.g., AuditBoard, HighBond, Vanta) Expert

Managing the end-to-end audit lifecycle, from planning internal audits to tracking remediation of findings and training business users on the platform. You'll essentially be the system owner.

Vulnerability Management (e.g., Nessus, Qualys, Tenable.io) Advanced

Designing targeted scan policies, validating findings to eliminate false positives, prioritising remediation based on business context, and reporting on overall exposure reduction.

Cloud Security Posture Management (e.g., Wiz, Palo Alto Prisma Cloud, Orca Security) Advanced

Investigating complex misconfigurations, writing custom policies to enforce security standards in our cloud environments (AWS, Azure, GCP), and working with DevOps to embed security into CI/CD pipelines.

Collaboration & Document Management (e.g., Confluence, Jira, SharePoint) Expert

Designing the ISMS documentation structure, creating automated Jira workflows for incident response and audit finding tracking, and setting up SharePoint permission models for sensitive documents. You'll ensure our knowledge is organised and accessible.

Executive Reporting (e.g., Power BI, Tableau, Diligent Boards) Advanced

Building interactive dashboards that pull data from GRC and security tools to visualise risk trends, control effectiveness, and audit progress for senior leadership. You'll also use these for external auditor presentations.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choice	Coming in	Where you are now	The step above
Internal Audit Scope & Schedule	Executes assigned audit tasks; has no input on scope.	Proposes minor adjustments to audit scope for specific projects; escalates major changes.	Recommends audit scope and schedule based on risk assessment; gets Director approval.
External Auditor Engagement	Gathers evidence as requested by the Lead Auditor.	Coordinates evidence collection and schedules interviews for auditors.	Manages auditor requests, presents evidence, and drafts responses to findings.
Risk Acceptance & Treatment	Identifies risks and logs them in the GRC platform; escalates treatment options.	Proposes risk treatment options for routine risks; consults on acceptance.	Recommends risk treatment and acceptance for identified risks within their workstream; gets management approval.
Team Hiring & Performance	No hiring authority; receives performance feedback.	Provides informal feedback to peers; no formal reports.	Mentors junior colleagues; provides input on performance reviews.

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Recurring Audit Findings

The number of audit findings, both internal and external, that reappear from previous audit cycles.

Target · Reduce recurring findings by 30% year-over-year

If we had 10 recurring findings last year, we'd aim for no more than 7 this year. This shows we're actually fixing things, not just patching over cracks.

Internal Audit Pass Rate

The percentage of internal audits that conclude with zero Major Non-conformities.

Target · Maintain a 90%+ pass rate on internal audits

If your team conducts 4 internal audits in a quarter, you'd expect at least 3.6 of them (so, 4 in practice) to pass without any critical issues. It's about getting it right before the external folks show up.

Mean-Time-To-Remediate (MTTR) for Critical Vulnerabilities

The average time it takes to fix vulnerabilities classified as 'critical' by our vulnerability management tools.

Target · Reduce MTTR for critical vulnerabilities to under 30 days

If a critical vulnerability is identified on 1st January, it should be fully remediated by 31st January at the latest. This shows we're on top of our most serious risks.

ISO 27001 Certification Status

Successful maintenance of ISO 27001 certification across all defined scopes.

Target · Zero Major Non-conformities in external audits

Achieving our annual ISO 27001 recertification with only Minor Non-conformities, or ideally, none at all. A Major NC means we've failed, and that's not an option.

External Auditor Satisfaction & Trust

The perception of our external auditors regarding the maturity and effectiveness of our ISMS and the quality of evidence provided.

Auditors express confidence in our processes, spend less time chasing evidence, and provide positive feedback on our preparedness. They'll often tell us directly if they're impressed, or if we're making their job harder than it needs to be.

Team Engagement & Development

The growth and satisfaction of your direct reports, and their ability to take on more complex tasks independently.

Your team members are actively contributing ideas, taking ownership of their workstreams, and expressing satisfaction in their roles during 1-to-1s. We'll also see this in their performance reviews and their ability to step up when you're busy.

Proactive Risk Identification & Mitigation

The ability to identify potential security risks before they become incidents or audit findings, and to put effective controls in place.

Regular contributions to the risk register with well-articulated, forward-looking risks and proposed controls. Fewer 'surprise' issues cropping up that should have been foreseen. It's about spotting the icebergs before we hit them.

Stakeholder Collaboration & Influence

Your ability to work effectively with other departments, getting them on board with security requirements and priorities.

Other teams actively seek your input on new projects, security requirements are built-in from the start, and there's less pushback on security initiatives. You'll know you're doing well when Engineering proactively tells you about a new tool they're using, rather than you finding out months later.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy

Protecting the Organisation

You get a real sense of satisfaction from knowing your work directly contributes to safeguarding our data, systems, and reputation. Every policy you refine, every control you implement, feels like a direct act of defence.

Successfully guiding the organisation through an external ISO 27001 audit with zero Major Non-conformities, knowing you've validated our strong security posture.

Solving Complex Problems

You thrive on dissecting intricate security challenges, figuring out how different systems interact, and designing elegant solutions that balance security with operational reality. It's like a giant, high-stakes puzzle.

Developing a compensating control for a legacy system that can't be patched, ensuring it's still secure without disrupting critical business functions.

Mentoring & Developing a Team

You enjoy guiding junior team members, sharing your knowledge, and watching them grow into confident security professionals. Seeing your team succeed is a significant motivator for you.

Helping a junior analyst understand the nuances of a complex risk assessment, leading to them confidently performing similar tasks independently in the future.

What frustrates people

The 'Security vs. Speed' Battle: Constantly negotiating with Product and Engineering teams who see security controls as a bottleneck to innovation and feature delivery.
Budgeting for a 'Non-Event': Trying to secure a seven-figure budget to prevent something (a breach) that hasn't happened yet, making ROI calculations feel abstract to the CFO.
Shadow IT Liability: Being held responsible for securing applications and data stores that you only discover after they've been deployed by business units without your knowledge.
The Last Line of Defense: The immense pressure of knowing that despite all the policies, training, and technology, a single human error can lead to a catastrophic breach, and you'll be the one explaining it to the board.
Translating Technical Risk: The challenge of explaining why a 'CVSS 9.8 vulnerability in a Log4j library' is a business-critical threat to an executive who just wants to know if the quarterly numbers are at risk.
Death by a Thousand Questionnaires: Spending a disproportionate amount of time filling out lengthy and often redundant security questionnaires for prospective clients, which all ask for the same information in a slightly different way.

What this role does not give you

A purely technical hands-on role; you'll be managing people and programmes more than configuring firewalls.
A low-pressure environment; accountability for security is significant.
A role where every decision is universally popular; you'll often have to enforce unpopular but necessary policies.

8Who you work with

This role directly impacts our ability to secure and maintain critical international certifications like ISO 27001, which is absolutely essential for winning and retaining major clients. Your work ensures we meet legal and contractual obligations, protecting our brand, revenue, and market access. Frankly, if we can't prove our security, we can't do business with many of our biggest customers. It's that simple.

Inside the business

Director, International Information Security
Heads of Engineering and Product
Legal and Data Protection Officer
HR Leadership
Internal Audit Committee

Outside the business

External ISO 27001 Auditors (e.g., BSI, NQA)
Certification Bodies
Key Third-Party Vendors and Partners
Regulatory Bodies (where applicable)

9What you need before you start

Not a wish list. The things you would be expected to already have.

Proven experience in managing an ISO 27001 ISMS, including leading internal audits and managing external certification audits.
Demonstrable experience in leading and mentoring a small team of information security or compliance professionals.
A strong track record of successfully implementing and managing security controls across various technical environments (e.g., cloud, on-premise, SaaS).
Experience in managing third-party risk programmes and vendor security assessments.
Ability to articulate complex security risks and compliance requirements to both technical and non-technical audiences.

10What to practise next

Where the job is going, and what to do about it starting this week.

GRC Platform Orchestration & Automation

Moving beyond just configuring GRC platforms, you'll need to orchestrate complex workflows that connect various security tools, automate evidence collection, and trigger remediation tasks across different systems. This reduces manual effort and improves response times.

API integrations between GRC, vulnerability manage · Workflow automation engines within GRC platforms ( · Scripting for data transformation and custom repor · Automated control testing and continuous complianc

This month: Identify one manual, repetitive task in our GRC platform and research how it could be automated using existing features or simple scripting.
Next quarter: Work with our IT/DevOps team to integrate a new data source into our GRC platform, automating a previously manual data input.
Month 4-6: Design and implement a new automated workflow within the GRC platform that triggers a Jira ticket when a critical control fails.
Ongoing: Explore advanced features and new modules within our GRC platform, looking for opportunities to enhance its capabilities.

Quick win: Set up a simple alert in our GRC platform to notify you automatically when a critical control status changes, rather than relying on manual checks.

11Staying current once you are in

What people here do to keep up

Regularly attend industry conferences and webinars focused on ISO 27001, GRC, and emerging cyber threats.
Actively participate in professional security communities (e.g., ISACA, (ISC)² local chapters) to network and share knowledge.
Pursue advanced training in specific GRC platforms or cloud security technologies as they become relevant to our environment.
Take on speaking opportunities or write articles to share your expertise and build your personal brand in the industry.

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

AI-Driven Compliance Automation

AI is rapidly changing how we collect evidence, monitor controls, and even draft policies. Competitors are already using AI to automate routine compliance tasks, dramatically reducing the 'GRC tax' and freeing up their teams for higher-value work. If we don't keep up, we'll be left behind, spending too much time on manual tasks.

AI-powered GRC platforms (e.g., Vanta, Drata, Hype
Natural Language Processing (NLP) for policy analy
Machine Learning (ML) for anomaly detection in con
Automated evidence collection from cloud APIs and
Ethical AI considerations in compliance and risk a

Advanced Cyber Threat Intelligence Integration

Simply reacting to vulnerabilities isn't enough anymore. We need to proactively understand who's targeting us, what their tactics are, and how to adapt our controls before an attack happens. Integrating threat intelligence into our risk assessments and control design will move us from reactive defence to predictive security.

MITRE ATT&CK framework for threat actor TTPs (Tact
Threat modelling methodologies (e.g., STRIDE, DREA
Open-source intelligence (OSINT) for security insi
Integration of threat feeds into SIEM and vulnerab
Proactive defence strategies based on known threat

13What you’ll use

What you’ll use

Skills this role draws on

Technical

ISMS Implementation & Management (ISO/IEC 27001)
Risk Management Frameworks (NIST RMF, ISO 31000, FAIR)
Control Frameworks & Auditing (COBIT, CIS Controls, SOC 2)
Business Continuity & Disaster Recovery (BCDR)
International Privacy Regulations (GDPR, CCPA, etc.)
Supply Chain / Third-Party Risk Management (TPRM)

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

1
From Senior Information Security Engineer (Compliance)
3-5 years in a Senior role
Skills to master
- Leading complex projects end-to-end, mentoring junior team members, making technical decisions independently, and presenting to mid-level management.
You're ready to move on when
- Successfully led multiple internal audit workstreams without significant supervision.
- Consistently identified and proposed solutions for systemic control weaknesses.
- Demonstrated strong communication skills with both technical and non-technical stakeholders.
- Acted as an informal mentor to newer team members, helping them grow their skills.
2
From External ISO 27001 Auditor
5-8 years as an external auditor
Skills to master
- Understanding internal business dynamics, building internal stakeholder relationships, and transitioning from an advisory role to an ownership role.
You're ready to move on when
- Managed audit engagements for multiple clients, including presenting findings to their leadership.
- Developed a deep understanding of various ISMS implementations across different industries.
- Expressed a desire to move from auditing to actually building and owning a security programme.
- Demonstrated ability to adapt to new organisational cultures and internal processes.
3
From Compliance Manager (Non-InfoSec Specific)
4-6 years in a broader compliance management role
Skills to master
- Deepening technical information security knowledge, understanding specific ISO 27001 requirements, and managing security-specific tools and frameworks.
You're ready to move on when
- Successfully managed other compliance programmes (e.g., quality, regulatory).
- Shown a keen interest and aptitude for information security principles and technologies.
- Willingness to undertake significant self-study and gain specific infoSec certifications (e.g., CISSP, ISO 27001 Lead Auditor).
- Experience in managing audit processes and responding to external assessments.

15Where this role leads

The long view: This work can lead to running a security or compliance function across a larger organisation, or into deeper technical specialism within information security.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how Lead ISO 27001 Auditor / InfoSec Manager is actually changing.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Security operations solutions and service management, worked against Lead ISO 27001 Auditor / InfoSec Manager.

Security operations solutions and service management Level 5

Applied to your work in Lead ISO 27001 Auditor / InfoSec Manager

This unit aims to provide learners with a comprehensive understanding of security operations solutions, including their types, functions, benefits, and limitations, and how they contribute to overall organisational security. Learners will also develop an understanding of security operations service management, including key processes and the importance of service level agreements.

How the thinking builds

1 Remember
2 Understand
3 Apply
4 Analyse
5 Evaluate
6 Create

An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

See Your Progress Grow Illustration

Lead ISO 27001 Auditor / InfoSec Manager

ISMS Implementation & Management (ISO/IEC 27001)
Risk Management Frameworks (NIST RMF, ISO 31000, FAIR)
Control Frameworks & Auditing (COBIT, CIS Controls, SOC 2)
Business Continuity & Disaster Recovery (BCDR)
International Privacy Regulations (GDPR, CCPA, etc.)
Supply Chain / Third-Party Risk Management (TPRM)

This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

16The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

Lead ISO 27001 Auditor / InfoSec Manager is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

Principal Security Architect / Senior Manager, Global Compliance (Level 5)
3-5 years in this Lead role

This is a significant step up, moving from managing programmes and a small team to directing entire functions and potentially managing managers. Your scope expands significantly.
- Enterprise Security Architecture Designing security solutions across the entire organisation, not just specific programmes.
- Advanced Risk Modelling Developing sophisticated models to quantify enterprise-wide security risk.
- Global Regulatory Landscape Deep expertise in a wider range of international regulations and their impact on strategy.
- Security Transformation Leadership Leading major initiatives to fundamentally change how security is managed across the business.

Working with AI on the job

Working with AI

Where AI is starting to help

Let's be honest, a big chunk of compliance work can feel like a grind: chasing evidence, drafting policies, summarising dense reports. But what if you could offload a significant portion of that to AI? We're not talking about replacing your judgment, but augmenting it, freeing you up for the strategic, high-impact work that truly matters.

Our organisation is investing heavily in AI to make our compliance and security teams more efficient. For a Lead ISO 27001 Auditor / InfoSec Manager, this means less time on the tedious bits and more time on actual risk reduction, team leadership, and strategic planning. We want you to use these tools to make your job easier, not harder.

Audit Evidence Automation

Use AI-powered GRC tools like Vanta or Drata to automatically collect evidence from our cloud services (AWS, Azure) and SaaS tools. It maps this data directly to our ISO 27001 controls, saving you from endless manual screenshotting and report pulling. Imagine getting an audit request and having 80% of the evidence already gathered for you.

Predictive Risk Analysis

Use AI/ML models integrated into our SIEM or GRC platforms to analyse vast datasets of security events and control failures. This helps identify patterns and predict future high-risk areas before they even become an incident or an audit finding. It's about shifting from reactive analysis to proactive strategy, spotting the problems before they fully emerge.

Policy & Procedure Generation

Use our secure, enterprise-grade LLM to generate first drafts of security policies, standards, and procedures based on ISO 27001 requirements and best practices. You'll still refine and approve them, of course, but it eliminates the dreaded 'blank page' problem for documentation, saving you hours of initial drafting time.

Executive Summary Synthesizer

Feed lengthy, technical audit reports or incident post-mortems into an AI tool to generate a concise, non-technical executive summary. This focuses on business impact, root cause, and strategic recommendations, making board-level communication much faster and more effective. No more spending hours trying to distil a 50-page report into a single slide.

Common questions

How do you become a Lead ISO 27001 Auditor / InfoSec Manager?

Common routes in include From Senior Information Security Engineer (Compliance) (3-5 years in a Senior role), From External ISO 27001 Auditor (5-8 years as an external auditor) and From Compliance Manager (Non-InfoSec Specific) (4-6 years in a broader compliance management role). Times vary with prior experience.

Where can a Lead ISO 27001 Auditor / InfoSec Manager progress to?

This role can lead on to Principal Security Architect / Senior Manager, Global Compliance (3-5 years in this Lead role), depending on the skills you build.

What new skills matter most for a Lead ISO 27001 Auditor / InfoSec Manager?

Increasingly, AI-Driven Compliance Automation and Advanced Cyber Threat Intelligence Integration. These are the skills our record of this role lists as growing.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my free Automation Fluency module What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.

Lead ISO 27001 Auditor / InfoSec Manager

Where should we send it?

Two short quizzes about you

Will AI change your work as a Lead ISO 27001 Auditor / InfoSec Manager?

What's rising in its place

AI-Driven Compliance Automation

Advanced Cyber Threat Intelligence Integration

Skills this role draws on

Technical

How you actually get there, here

From Senior Information Security Engineer (Compliance)

From External ISO 27001 Auditor

From Compliance Manager (Non-InfoSec Specific)

The credential is what you can do today. These are what keep you valuable.

Roles this leads to

One to one, on the work you already do

Everything else the record holds

The career path, and where it branches

Principal Security Architect / Senior Manager, Global Compliance (Level 5)

Where AI is starting to help

Audit Evidence Automation

Predictive Risk Analysis

Policy & Procedure Generation

Executive Summary Synthesizer

Common questions

Want a read on where you stand?