Do you think ISO 27001 Lead Auditor certification is essential for a career in cybersecurity and compliance, or can experience alone be sufficient?