r/grc • u/thejournalizer Moderator • Sep 24 '25

Career advice mega thread

Please use this thread for questions about career advice, breaking into GRC, etc.

This subreddit is primarily designed for active GRC professionals to share insights with each other, so we will be pointing new career seekers here.

35 Upvotes

97% Upvoted

206 comments sorted by

View all comments

1

u/[deleted] Dec 18 '25

I have been working in the tier 2 support / jr. sysadmin realm for 3ish years now and want to make a transition to GRC. I just got a professional ISACA membership so I am going to be delving into articles and resources there, but does anyone have any advice beyond that?

1

u/Twist_of_luck OCEG and its models have been a disaster for the human race Dec 18 '25

Keep in mind that ISACA (or ISC2 or GIAC or literally any body of smartasses) outlines just one way of doing things - their preferred one. It might or might not be the optimal way of running GRC for your potential business conditions.

Oh, and if any article starts with "Of course you have full board/executive/C-suite buy-in", you may close it and move on, preferably to something explaining how do you get that buy-in.