Advice for a novice apply for ICT Security Specialist.

A couple months ago, i posted about the overuse of Domain Admin account by my fellow IT staff. Im learned role based delegation, using gpos and LAPS (just a bit). I want to apply for the company's ICT Security Specialist (duties are defensive/blue). All i have is EJPT and hopefully CPTS (exam is next, scared af).
My question is seeing as i only did offensive cybersecurity, and my company has zero in place of policies and best practices. What approach …

account admin advice blue cybersecurity defensive domain domain admin laps role security staff the company