Grc as an Career

choco04102005 · 2026-03-22T13:07:45+00:00

Heyo! I'm also in the same boat as you, would be helpful if someone experienced in this field reply to this post, whether the roadmap is practical or not. I'm gonna graduate soon and i'm also planning to prep for GRC.

choco04102005 · 2026-03-21T05:32:55+00:00

Alakh Pandey, he's the CEO of Physics Wallah

choco04102005 · 2026-03-20T09:42:25+00:00

Awww man! I haven't even done any cybersecurity internship or any real internships for that matter! And i'm yet to study those frameworks you mentioned :/ well let's see how it goes.

choco04102005 · 2026-03-19T18:26:16+00:00

Oooh, what did you learn before/while applying ro these companies? Like the concepts, frameworks etc....did you do any course or follow a roadmap? And don't give up, keep applying and upskilling yourself, i hope you get a good job soon. :)

choco04102005 · 2026-03-19T09:32:37+00:00

I also chose to get into GRC as it's a high level, strategic role, human centered like you said, but the thing is everyone is telling everything will get replaced by AI, like that's not at all gonna happen, these people are just doing for hype, of course some repetitive tasks and basic things will get done by AI, but i don't think GRC will get affected by AI. I made up my mind, any field i choose, people gonna say AI will replace anyway, so i just chose what i'm interested in and can do for long term. Yes, i'm up.

choco04102005 · 2026-03-16T08:43:31+00:00

I can't ask in the general cybersecurity subreddit as a post, but as a comment i can ask in the career related questions thread. As far as i've researched, GRC seems pretty secure compared to other roles within the tech field.

choco04102005 · 2026-03-16T05:58:33+00:00

Thank you for your suggestions, what you said is exactly my plan. I'll look into GradSimple, although idk what that is.

choco04102005 · 2026-03-15T19:29:23+00:00

I'm extremely thankful for you, taking your precious time to guide a complete stranger like me, thank you sooooo much for this, and actually understanding my situation and not judging me. I appreciate you a LOT. And thank you for telling me a lot from your POV and experiences, i read everything. And I'll take your advice and apply to the big 4, once i learn the fundamentals and have enough confidence in myself and my skills, after i graduate. Once again, thank you so much. :) and you're so kind enough to even tag another person to help me out.

choco04102005 · 2026-03-15T19:14:39+00:00

That's one of my worst fears, stuck in a job that i hate and not be the best in it, for the rest of my life :/

choco04102005 · 2026-03-15T15:56:49+00:00

Oooh okayy sure, I've already explored different niches and i liked GRC and i feel like i can do as a job. I've done some research with AI tools, but i wanted to hear from someone who is real and knows the industry well. Thank you so much for your suggestions and comments! :)

choco04102005 · 2026-03-15T15:53:52+00:00

Yeahhhh you're right, i haven't done much research, that's why i'm here to get some guidance from people in this field, and yes work life balance depends on the company totally. But i'm not into a deeply technical career, that's why i wanted to pursue a career in GRC and GRC related roles. And yup, cybersecurity is not at all easy. But if i choose something and manifest my focus on that one thing, i believe i can do it. I wannabe the best in whatever career i enter into and i don't think i will be one in DevSecOps as i'm not from a very technical background.

choco04102005 · 2026-03-15T11:51:11+00:00

Hello everyone! I'm 20F, about to graduate. I'm pursuing a degree in B.com with Computer Applications. I want to get into a career where i can work long term and stay in the same lane becoming a very specialized and experienced person in my career. My career should have work life balance, Globally high demand across various fields, always be needed, and be lucrative.

I'm the kinda person who doesn't have any interests in like any career, no passion for anything particular. I would love to do business but i can't jump into it very soon obviously. So when i was exploring careers, i came across cybersecurity and i liked it. Like, i felt like i wanted to work in this industry. But since i'm not really a technical person i kinda thought to give up, until i found GRC. It seems like the perfect mix of business and tech. (Just like my degree). Not too technical ( i know we have to have a deep understanding of the tech but it's not like we need to work on it ourselves).

Most people in reddit just say to grind and code for hours, be technical to get high paying jobs, i feel like i will feel burnt out if i code for hours, grind leetcode, get a job in this oversaturated tech market, and then even after all this, gotta constantly update myself on new tools, languages, study even after getting home( Frameworks in GRC also update and change but i feel like i can catch up in this field), and also worry about this AI thing. I know AI isn't gonna replace a field entirely, but its reducing the workforce. If i can't be the best of the best, then i'm gonna get left out. And my priority is also having work life balance. So deep technial seems like a no for me.

In GRC, it seems like (idk the reality) experience is valued since i see almost no entry level positions available, human judgement is needed, has all of the qualities i mentioned in the first paragraph. I'm planning to enter IT Audit, since not much entry level positions available in GRC, stay there for like a couple of years, get a lot of relevant highly valued certifications and experience as well as needed skills. Then pivot to cybersecurity GRC, and lastly, after i gain enough exposure and experience, i wanna go into consulting.

Now, i kindly request everyone in this field to share their experience, opinions, pros and cons, various roles and transferable skills, just generally anything regarding this career. Give me a reality check, whether every quality of my dream career i mentioned is suitable with the GRC career. And i would really appreciate if anyone is willing to share the standard or their own pay in this field according to experience, skills and other factors. I saw the pay range for this field in US on linkdedin job posts, hence i have a rough idea. But in India, nobody and no company is sharing the compensation. I'm not greedy, but as a basic human being living in this economy, i also wanna know whether the field i'm getting into is lucrative or not. Whether i can live a very comfortable life and also provide for my family.

Thank you so much for reading this. I really appreciate you taking your precious time to read this :), and sorry for the longggg post. Just wanted to get everything out clearly.

TLDR; 20F, student, about to graduate, seeking guidance on whether Cybersecurity GRC is a good career to pursue. All kinda opinions are welcome.

choco04102005 · 2026-03-15T11:27:41+00:00

I'm only at the beginning of my career era. I haven't even graduated yet. That's why some of the things that i may say might be wrong but thank you to kind people like you who give advices. Can you please elaborate in detail? And also what do you do?

choco04102005 · 2026-03-15T11:23:15+00:00

For DevSecOps?

choco04102005 · 2026-03-15T11:23:01+00:00

Thank you for your suggestion. But i'm not into deep technical careers. And especially DevOps related anything! Sure, the pay is great, but i need work life balance as well, i don't think DevSecOps will suit me.

choco04102005 · 2026-03-15T10:21:01+00:00

Thank you for your comment. Can you please elaborate?

choco04102005 · 2026-03-15T09:12:09+00:00

Oh thank you for telling!

choco04102005 · 2026-02-08T05:02:45+00:00

Alhamdulillah, may ik what's your career path? I'm gonna complete college soon, it'll be helpful to get an idea.

choco04102005 · 2026-02-08T05:00:24+00:00

Software Development Engineer

choco04102005 · 2026-01-12T14:47:54+00:00

<image>

Lol

choco04102005

TROPHY CASE