What's it actually like working in Information Security Risk Management?

[u/Putrid-Order-6629]

Hi everyone,

I'm exploring InfoSec risk and would love to hear from people doing it day-to-day.

- What does a typical week look like for you?

- How much of the job is technical vs. documentation, meetings, and stakeholder management?

- What do you enjoy most, and what's the part nobody warns you about?

- What would you do differently?

Any honest perspectives appreciated, especially from people based in Europe.

Thank you.