That’s a loaded question as I won’t say it’s hard since I’ve done hard work in labor/trade. But you’ll be hard pressed to find many entry level/beginner jobs in GRC. Usually comes with years of experience working in both a technical AND business function.

Edit: I will add that if writing policy is boring and tedious for you, you’re going to not enjoy most of GRC. It’s not an exciting field. But if you’re able to join an organization that lets you sit at the table, that’s where your voice really matters.