I am currently working as the administrator of a few small companies and have the opportunity to begin work in the field of GRC.
To explain why I would swap from what I am doing, it sounds better than it really is. Long story short it is a ton of work and not a great pay, to the point where I am constantly having anxiety attacks over work getting done and losing sleep from stress.
I have been doing compliance for the companies for DFARS and I am actually liking the work a lot, that being reading policies, getting controls and determining if they are in place via policy and employee interviews.
I am not certain that I will go down this path, but it is a good possibility, and my questions are:
A. do you know of courses or certifications that I should begin looking into?
B. What is there to doin the way of “moving up”? is there more in the field to move into after you start?
Thank you for any help you can offer me.