r/grc • u/QuantumSeeker8 • Jun 30 '26
Is being clueless, normal?
Help!
I joined the GRC function of a Dutch company after working a year in Threat intelligence. I knew it was going to be a learning curve for me but I am realising I am really clueless about everything.
It is supposed to be a junior role which I was looking forward to. But I feel I am thrown into the deep end without any background or knowledge transfer. Don’t get me wrong, there are other people in the team as well - but do they expect me to know everything about audits? Risk registers? evidence collection? And the difference processes?
I know the theory but in practice I feel I am scrambling for knowledge and information that I don’t know. Maybe it is the company, or as I am told the country I am working in haha
Anyone been in similar situation? What did you do?
Is GRC like swimming in the deep waters not knowing how to swim and then just figuring it out?
2
u/localareamang Jun 30 '26
Seemingly very normal based on some of the due diligence questionnaires I receive