Deloitte GRC Pro Seeks Technical Cybersecurity Role

A professional with 1.6 years of experience in Governance, Risk, and Compliance (GRC) at Deloitte is contemplating a career shift into a more technical cybersecurity role. This individual is torn between resigning without a backup plan to focus on acquiring technical skills and staying in their current position while preparing for a potential transition. The primary concern is the perceived lack of technical expertise and the feeling of not being fully engaged in cybersecurity work.

Understanding GRC and Cybersecurity

GRC is a crucial aspect of cybersecurity, focusing on the governance, risk management, and compliance aspects of an organization's security posture. However, for those interested in the more technical aspects of cybersecurity, such as Security Operations Centers (SOC), blue team operations, incident response, and cloud security, a role in GRC might not provide the desired level of technical engagement.

Technical Skills in Demand

The cybersecurity field is vast and dynamic, with a constant need for professionals skilled in areas like threat detection, penetration testing, and security architecture. For someone looking to transition from a GRC role into a more technical position, acquiring skills in programming languages, familiarity with cloud platforms, and knowledge of cybersecurity frameworks and standards is essential.

Transition Strategies

There are several strategies one could consider when looking to transition into a technical cybersecurity role. Firstly, identifying the specific technical areas of interest and then pursuing relevant certifications and training can be beneficial. Additionally, engaging in personal projects or contributing to open-source cybersecurity initiatives can help build a portfolio of technical skills.

Practical Advice

It's not necessary to have all the answers before making a move. Sometimes, taking calculated risks and being open to learning and growth can be the most rewarding path forward.

For those considering a similar transition, it's crucial to weigh the pros and cons of leaving a current role versus staying and preparing for a move. Networking with professionals who have made similar transitions can provide valuable insights and advice.

What This Means for You

If you're in a GRC role and aspire to move into a technical cybersecurity position, start by assessing your current skills and interests. Focus on building a strong foundation in technical areas relevant to your desired role. Utilize online resources, attend webinars, and consider mentorship programs to guide your transition. Remember, transitioning to a new role takes time and dedication, but with a clear plan and persistence, it's achievable.

• Identify your technical interests within cybersecurity.
• Pursue relevant certifications and training.
• Engage in personal or open-source projects to build your portfolio.

By taking these steps, you can set yourself on a path towards a fulfilling career in technical cybersecurity, whether that's within your current organization or a new one.