The most underrated Cyber Security specialisation (Highly Paid)

This cyber security specialisation is hands down the most underrated specialisation. Cyber Security Audit or sometimes referred as Cyber Security Governance, Risk and Compliance (GRC).

I explain what the job is like in this video.

[UnixGuy]

This is updated video, start a career in GRC today:

The BEST Cyber Security GRC Training for Beginners | GRC Mastery

[lockedvegan]

I love the brevity of your videos. The information you convey is so clear, clutter-free, and to the point. Thank you for readily sharing your knowledge and expertise with others.

[celestemontano]

I’d love a video on work-life balance for different specializations… which ones require you to be “on call” at odd hours, which ones are more standard 9-5, etc. Love your videos!

[BramSLI]

I have an interview for an auditor position on Monday! I've been following your channel for a while now and it has been a huge help in getting an understanding of what I need to do in order to break into this field. You really do need to put out hundreds of applications. You just have to keep at it.

[TheLORDNIGHTSHIELD]

I have worked as InfoSec Auditor for Deloitte. Moved to GRC role. This role is 100 times better as a job. More management involved. More Creativity. You see actual staff. Audit is nice, but GRC is better. I personally think these are two different types of jobs and profiles. It is like ISO auditor vs ISO Implementer(even the Idea why two different certification exist and different experience required). As GRC states - Governance, Risk and Compliance. First word here - Governance. So you have to Plan for future. But Audit is only about Past or AS-IS in best case. I personally do not think it is proper to Put CyberSecurity Auditor and GRC guys together, even though most companies Do, as they use outputs of each other. Again - it is my IMHO :-)

[trblmkr]

SUBSCRIBED! I just feel like I'm getting VALID, REAL information from this man and Im so grateful!

[toasted-kitten]

i got an internship doing security governance without knowing what it was when i applied lol

[funforeveryone]

You are simply great 👍. Love from India 🇮🇳

[Romy---]

I work in finances and planned to do an ICA certification in Compliance to try to land a better job in the finance field. I was not really excited in getting the certificate because I'm not too happy in finances. Last week I started looking into cybersecurity and I'm completely hooked and your videos are helping me plan my first steps and beyond. So I'll probably change the ICA in finances, for Compliance in cybersecurity lol.

[oscarsheen]

Am enjoying listening to your videos. Watched quite a few this past week. Good on you!

[PurpleTeamer]

CCNA was great 15 Years ago to get thru the HR filter, when you have 0 experience in IT.

[bubovulpes]

I'm glad I found your channel.
You are most down to the earth guy in the cybersecurity space.
Currently, I'm studying for CCNA and would like your advice on what to study next.
If it's true that blue team is more in demand, what certificate should I have to get a foot in the door?
What is the equivalent of CCNA or CCNP for the blue team, and what certificate do employers desire?
Thanks

[bukongeric]

Best Cybersecurity videos I have come across on the internet. This man is extremely knowledgeable on Cybersecurity

[melinasandoval]

Thank you sir, your content is amazing!!!❤

[ayasoboyi]

Great video, concur with all of this! You sir have my subscription. :)

[emilyau]

I had 2 offers after graduating. One was cybersecurity auditor, and the other was business analyst. I chose business analyst and hope it was a good choice.

[willjewers]

Hi Unix, I've been watching your videos religiously and am currently studying for security +. I have a specific question. I'm 32 and I have 12 years of experience, in logistics roles such as customer service coordinator(did a lot of customer service/analytics, problem solving), operations manager, and currently an upper operations manager. Do you have any idea, based on my experience, if I should look into a specific CS job? I'm still not sure exactly the direction I want to go. Thanks for any input.

[honotam]

Isn't GRC much more than Audit? How about leading governance activities (committees, forums etc., ensuring adherence to policies and standards), risk (risk appetite, stability and resiliency, KRI) and compliance (ensuring effective controls are in place)? Also there is a bunch of regulatory and external exams to deal with. Curious about your thoughts here.

[katachiaudio]

Thank you very much for your informative videos, I just come across your channel and love the info you share.
Regarding the Cyber Security Auditor carrier path, I don't have any experience in the IT industry but have worked for more than 15years in certification and auditing to IEC/ISO standards for electrical devices (eg IEC61010-1, IEC60601-1).
Do you think if I got the certifications you mentioned I would be appealing to companies for hiring?
Would I also need to get some technical certs as well for backup?

[hbkyi]

I really love your amazing videos keep up the amazing work man!

I’m a CS freshman and am into cybersecurity. I have a couple of questions about the IT audit/GRE if you could help me with them please.

1- Which cyber security field you think is the most paying? Is it IT audit/GRE or cloud security or what?

2- While working for consulting companies am I expected to know much about the other cybersecurity fields or it’s just enough to know about GRC given that I’m only interested into this field particularly?

3- As I mentioned I’m a CS freshman so I don’t have the required work experience for certs like CISSP and CISA, this case what certs or road map that I should follow in order to get my first GRE internship at a big 4?

Thanks again for the great content!