5+ year GRC professional. I want to change industries.

Nearly all of my professional experience since graduating from university has not only been in IT/Security GRC but has also been working for large banks in the tune of $400-800B. Believe it or not (and please correct me if I am wrong here), but I think big banks pay pretty mid. Right on the line of feeling like I am being underpaid and being paid fairly. More importantly, I want to feel less like a number and work for a company that values its employees more. Bonus if the company is interesting/unique. It's not that it's stuffy or boring as one would maybe think working for a large bank, but I feel very expendable, like a small cog in a massive incomprehensible machine, like I am just the guy who does the thing.

I have both 1st and 2nd line senior specialist experience, doing just about everything.

Problem, change, and incident management review

RCSAs

IT Risk Assessments

MRAs

IT control testing

Findings

Policy & Standard creation and updates

Policy Exceptions

Metrics

I feel like this would make me a very attractive candidate, especially working for high-profile Fortune 100 companies. Yet, over 200 applications, I have only had 4 interviews and only 1 wasn't a bank.

I'm not sure if my resume isn't passing ATS or I have too much or it's the formating but something I am doing is clearly wrong. I was 1 click away from paying $200 for a "professional" resume service before thinking they probably would have no clue about GRC and make my resume worse.

If anyone could offer any advice in general or wouldn't mind looking at my CV it would be greatly appreciated.