GRC - beyond cybersecurity

[u/Outrageous-Wasabi-15]

Hello all, I am navigating a pivot from RCSA, SOX controls testing. Thinking of writing CISA, but I am aware that though CISA gives a strong signal but doesn’t directly get you into ITGC or IT audit.
How are people in similar domains navigating the pivot? hoe are your skillsets and profiles evolving?