Cyber Security GRC Career path | Certifications | job duties | opportunities

This video is about Cyber Security Governance Risk and Compliance. I explain what the role actually entails, why we need it, and what certifications can help you land a job in this VERY important area of cyber security.

This area is usually misunderstood by technical cyber security professional, so I hope this video clarifies any confusion that you have.

[UnixGuy]

This is updated video, start a career in GRC today:

The BEST Cyber Security GRC Training for Beginners | GRC Mastery

[isaacsolomon]

Great Video UnixGuy; I find it very helpful and helped re-arrange my start-off point into Cybersecurity- GRC, to be precise. Thank you.

[virusglass]

Great video. Is the world becoming more secure? Doubtful, but there is definately a push for more security regulations - you can count on that and this is where GRC comes into play. Related to this is that a lot of high-end companies (ASX 100 for example), don't yet have CISO's but don't be surprised that if not mandated by regulation, then there will at least be a push by the regulators for these positions to be created in the future in my view.

[mateuszkacperski]

Thank you for today:) from 16th of September I will start my Cybersecurity journey with you and all your advice 🎉 I will keep you update :) 😊

[gardenfairyvlogs]

Thank you for this video, clear and crisps guidance. I have recently moved to Compliance through IJP from development profile. This video helped me clear most of the queries I had. Could you please guide us on the financial growth in compliance. Also how to build confidence talking to senior stakeholders.

[stevemcmichael]

A related podcast that might be of interest:
What is GRC? 10:00
Why is GRC underrated? 14:35
Key success factors in breaking into GRC 23:10
Value of Certified Information Systems Auditor (CISA) cert 33:10

[law.techies]

Thank you so much for this video @unixguy, this is the closest I have come to understanding the big GRC picture. I am a lawyer who has been interested in tech for the longest, especially security and privacy issues, and I want to go into GRC. My first request is that you please present me with a possible roadmap. One of the struggles I have had is finding a pivot point. I know it will be hard, but I think this is a path I would actually find fulfillment in. As a lawyer, I already help businesses drive their internal policies and compliance of some sort.

[vamsikrishna]

Hi UnixGuy,
I have a master's in Computer Science and I work as RSA Archer consultant helping businesses with development & implementation of GRC programs using Archer.
I am further interested in exploring GRC opportunities, could you point me the right direction to further strengthen my skills and employability?

I didn't have much knowledge about GRC until I started this job and always saw it from the technical requirements standpoint, but I am interested towards increasing my knowledge about GRC.I am looking for some help to guide me in the Right direction.
I really appreciate your channel.There is much less content available online about GRC careers. Please continue doing it.

Thank you.

[aadityaoza]

Great video. What are the similarities and differences between cyber security audit vs GRC job functions? the certifications for both seem to be similar. Appreciate your input on this! thanks!

[sherwinwilliams]

I just came upon this video, can you share a list of all the smaller companies that would likely hire a JR. GRC analyst? Great videos btw. Learning a lot through them. Thank you for all the hard work and commitment.

[PhiveIncognito]

I used to work at a large accounting and consulting firm. The information and cyber security unit in consulting took in tons of fresh graduates to do GRC work. In my country, often times all it takes to get into cybersecurity via GRC is, i quote job postings - “interest” or “knowledge”

[polescodes]

I work as a Cyber Security Engineer and a Penetration tester simultaneously. I want to pivot both into GRC for a higher paying role. Is there any tips you have for me?

[bdig]

Thank you for the information! I am looking to pivot careers entirely into the cyber security field, and GRC sounds fascinating. I currently hold an BS in Business management as well as an MBA. I recently completed Sec+. What would you advise my next step to be?

[ruthless]

Thank you for keeping it simple and straight to the point

[joshuab]

Hi Unixguy, just want to kindly ask you again,

Lots of videos and job searching engine say that GRC is mostly needed for public sector ( Govt, etc ).

Is this true ? what is the percentage comparison between GRC job in public and private sector ?

Thankyou

[Jonamaldo]

Back in my first days, ISACA allowed you to credit up to 3 years if you had a Bachelor’s Degree. That might be true as of today. I still hold my CISA and will do as long as I can.

[bahpapajarmjackson]

I am an assistant company secretary and look after the audit and rsik committee. Just attended a board risk day on this very topic. Eye opening. I am conscious of how big this field is becoming. What cyber security roles would I be wise to get into (that pay more than assistant cosec) at the governance level that don't require deep technical knowledge?

[prasad]

Hi UnixGuys thanks a ton for this video... I am IT professional with 14yrs of experience in Network & Security but now i want to move into GRC and I have completed my ISO 27001 Lead Implementer Certification & CISM certification. I am also planning for CISSP. Can you please help me on how should i prepare for interview? Any tips you would like to share... Thanks in Advance..

[MorrisandApril]

Now that this is a year old…
Do you think having the Google cert in cyber security would be a good start toward training for GRC?

[moniquerich]

Hello, Great video but very confusing. You start off by saying that GRC is an area that is normally easier to start off in but then you say that you can’t get a certification unless you’re already working five years. How would you gain employment if you don’t have the experience and can’t even get a valuable certification to demonstrate basic knowledge?