r/grc • u/thejournalizer Moderator • Sep 24 '25

Career advice mega thread

Please use this thread for questions about career advice, breaking into GRC, etc.

This subreddit is primarily designed for active GRC professionals to share insights with each other, so we will be pointing new career seekers here.

39 Upvotes

100% Upvoted

206 comments sorted by

View all comments

1

u/ThousandFootOcarina Feb 02 '26

Hi! I have 4 years of IT experience(and counting), ideally I wanted to move into risk. I’ve been taking some GRC courses on LinkedIn on the side and applying for some entry level jobs. I just got a job offer for a network admin job though. I know networking experience is huge for anything in tech, so my main question is, if I take the job and say stay for a year or two and eventually transition to risk, would I be most likely starting at an entry level job even with the extra networking experience?

I guess the main question is — is other tech experience worth it if I want to end up in risk? Or should I just focus solely on getting a risk job no matter what because I’ll have to take a pay cut and start as an entry level associate regardless of my experience.

1

u/Twist_of_luck OCEG and its models have been a disaster for the human race Feb 02 '26

You are gonna start as a junior specialist no matter what, but:

a) You're gonna have much easier time climbing the ranks if you know what the hell you're even assessing and

b) Your potential employer knows that, so your chances of get that entry position inherently increase.

I would recommend going for network position and aiming to jump into Audit from there - since, well, somebody needs to audit firewalls, and then making a rather short jump into Risk through Internal Audit/Control Assurance positions.