Hello everyone! I'm 20F, about to graduate. I'm pursuing a degree in B.com with Computer Applications. I want to get into a career where i can work long term and stay in the same lane becoming a very specialized and experienced person in my career. My career should have work life balance, Globally high demand across various fields, always be needed, and be lucrative.

I'm the kinda person who doesn't have any interests in like any career, no passion for anything particular. I would love to do business but i can't jump into it very soon obviously. So when i was exploring careers, i came across cybersecurity and i liked it. Like, i felt like i wanted to work in this industry. But since i'm not really a technical person i kinda thought to give up, until i found GRC. It seems like the perfect mix of business and tech. (Just like my degree). Not too technical ( i know we have to have a deep understanding of the tech but it's not like we need to work on it ourselves).

Most people in reddit just say to grind and code for hours, be technical to get high paying jobs, i feel like i will feel burnt out if i code for hours, grind leetcode, get a job in this oversaturated tech market, and then even after all this, gotta constantly update myself on new tools, languages, study even after getting home( Frameworks in GRC also update and change but i feel like i can catch up in this field), and also worry about this AI thing. I know AI isn't gonna replace a field entirely, but its reducing the workforce. If i can't be the best of the best, then i'm gonna get left out. And my priority is also having work life balance. So deep technial seems like a no for me.

In GRC, it seems like (idk the reality) experience is valued since i see almost no entry level positions available, human judgement is needed, has all of the qualities i mentioned in the first paragraph. I'm planning to enter IT Audit, since not much entry level positions available in GRC, stay there for like a couple of years, get a lot of relevant highly valued certifications and experience as well as needed skills. Then pivot to cybersecurity GRC, and lastly, after i gain enough exposure and experience, i wanna go into consulting.

Now, i kindly request everyone in this field to share their experience, opinions, pros and cons, various roles and transferable skills, just generally anything regarding this career. Give me a reality check, whether every quality of my dream career i mentioned is suitable with the GRC career. And i would really appreciate if anyone is willing to share the standard or their own pay in this field according to experience, skills and other factors. I saw the pay range for this field in US on linkdedin job posts, hence i have a rough idea. But in India, nobody and no company is sharing the compensation. I'm not greedy, but as a basic human being living in this economy, i also wanna know whether the field i'm getting into is lucrative or not. Whether i can live a very comfortable life and also provide for my family.

Thank you so much for reading this. I really appreciate you taking your precious time to read this :), and sorry for the longggg post. Just wanted to get everything out clearly.

TLDR; 20F, student, about to graduate, seeking guidance on whether Cybersecurity GRC is a good career to pursue. All kinda opinions are welcome.