Video

@@I_amLJB Hi. Thanks. Try ola@cyberfirstsolutions.com or info@cyberfirstacademy.com

@RS-nc5qx that's why I advocate for people to explore the Governance Risk and Compliance (GRC) route to get your foot in the door. There are junior Cybersecurity GRC roles

@@cyberfirstsolutions Really? I always saw GRC as something very high end and primarily dedicated myself to SOC and Security Analysis. Where can you get started with GRC? Also, do you need any official certifications to perform GRC as an independent contractor?

@RS-nc5qx you can get started by seeking junior Information Systems Security Officer (ISSO) and Security Control Assessor (SCA) roles or if you google "RMF jobs" or "GRC jobs" you'll see a bunch of them. Most companies will ask that you have at least one cybersecurity certification. The ones I would recommend are: Security +, CGRC, or CISA. If you want to specialize in card card payment processing compliance, then there will be specialized certifications for that (PCIP and QSA). You will need to get training in the specific area or framework to be considered for these roles

@Holdupweight type GRC in indeed.com and you'll see a bunch show up. Also Google "GRC jobs"

@networkman4114 Having a technical background doesn't always guarantee a GRC job. Recruiters are looking for people with knowledge of frameworks, processes, and procedures

@@cyberfirstsolutions I have knowledge of frameworks I work them currently and I was on a Gov contract.

@networkman4114 let's explore the job search strategy you are implementing because people with less experience than what you have listed, are getting jobs in GRC. I tell my students that they need to have a resume with specific keywords listed, they need to have a LinkedIn in profile that mirrors their resume, they need to have a cybersecurity certification, they need to be able to translate their technical and non-technical skills to GRC skills/roles, and they need to be able to answer interview questions strategically and appropriately. There are other tips as well.

@@cyberfirstsolutions Thanks you have an email I can reach you.

@@JustineCarissa Awesome!

@tonyaustin1070 Hi. There might be companies willing to hire you without a certification but they might have a contingency that you get one within 3 to 6 months. Google "GRC jobs" in the job post, they might say, "Must be able to obtain security +). The skills needed for GRC roles include: Presentation skills Communication skills Proofreading skills Reviewing and editing skills Basic Microsoft Word, PowerPoint and Excel skills Knowledge of cybersecurity frameworks. Here’s a video I did on how to get a GRC job: czcams.com/video/5n5mrtoEolE/video.html

@@cyberfirstsolutions Ok! I greatly appreciate this helpful advice. I'll be sure to check out the video.

@@leemae5126 Hi. Here’s the link for GRC Analyst training www.techpreneursclub.com/apply-with-techpreneurs-club-oa There are other GRC positions such as Information Systems Security Officer (ISSO) and Security Control Assessor (SCA). All under the GRC umbrella. Here are the links for those trainings: ISSO training: www.cyberfirstacademy.com/information-system-security-officer-training SCA training:www.cyberfirstacademy.com/8f143867-f63c-4510-b48e-f5f6602e2ef5

Hi. Yes I do. www.cyberfirstacademy.com/mock-interview

Thank you I’m going to book a 1:1 I’m trying to prepare for a interview

Information system Security Officer (ISSO)

@@cyberfirstsolutions could I apply if I have a security + Cert?

@@torandavis check out my video czcams.com/video/5n5mrtoEolE/video.html

@@steffan662 Hi. I don't believe I have seen an ISSO Manager title. It's usually called Branch Chief or Information System Security Manager (ISSM). The main difference is that one is a lead role while the other is not

Thanks

@mmcguire1970 Hi. For the most part, you might be on a Zoom or Teams call, talking one-on-one, or talking to a group of 3 to 5 people. I've seen others who do most of their communications via email. No one likes public speaking but the salary helps reduce that concern. I look at it this way, having to speak to people once in a while vs doing back breaking construction work under the hot sun

@@jordanbrock788 Hi. Here’s the link for GRC Analyst training www.techpreneursclub.com/apply-with-techpreneurs-club-oa There are other GRC positions such as Information Systems Security Officer (ISSO) and Security Control Assessor (SCA). All under the GRC umbrella. Here are the links for those trainings: ISSO training: www.cyberfirstacademy.com/information-system-security-officer-training SCA training:www.cyberfirstacademy.com/8f143867-f63c-4510-b48e-f5f6602e2ef5

That's news to me, as many people from UK that I have interacted with, have told me they don't. Let me know how I can assist you

Not allowed

That can be considered an advantage. If you have a full-time job somewhere else, then you can get a part-time contractor job, but most contractor jobs I see are full-time and not part-time

Hi. I mainly cover NIST in terms of GRC, which is not used in the UK.

Hi. Here’s the link for GRC Analyst training www.techpreneursclub.com/apply-with-techpreneurs-club-oa There are other GRC positions such as Information Systems Security Officer (ISSO) and Security Control Assessor (SCA). All under the GRC umbrella. Here are the links for those trainings: ISSO training: www.cyberfirstacademy.com/information-system-security-officer-training SCA training:www.cyberfirstacademy.com/8f143867-f63c-4510-b48e-f5f6602e2ef5 www.techpreneursclub.com/apply-with-techpreneurs-club-oa

Hi. Here’s the link for GRC Analyst training www.techpreneursclub.com/apply-with-techpreneurs-club-oa There are other GRC positions such as Information Systems Security Officer (ISSO) and Security Control Assessor (SCA). All under the GRC umbrella. Here are the links for those trainings: ISSO training: www.cyberfirstacademy.com/information-system-security-officer-training SCA training:www.cyberfirstacademy.com/8f143867-f63c-4510-b48e-f5f6602e2ef5 www.techpreneursclub.com/apply-with-techpreneurs-club-oa

Yeah. The pension is a big deal. Not too many companies do that anymore. I know Deloitte offers pensions. Most Pentesting jobs are done by contractors. I guess it makes sense to have an independent, non-biased party conduct a pentest. There's also usajobs.gov

Hi. Here’s the link for GRC Analyst training www.techpreneursclub.com/apply-with-techpreneurs-club-oa There are other GRC positions such as Information Systems Security Officer (ISSO) and Security Control Assessor (SCA). All under the GRC umbrella. Here are the links for those trainings: ISSO training: www.cyberfirstacademy.com/information-system-security-officer-training SCA training:www.cyberfirstacademy.com/8f143867-f63c-4510-b48e-f5f6602e2ef5

Checkout my free master class www.cyberfirstacademy.com/master-class-getting-a-6-figure-cybersecurity-job-with-no-technical-skills

@@ShaunPeoples-wf7dr Hi. Here’s the link for GRC Analyst training www.techpreneursclub.com/apply-with-techpreneurs-club-oa There are other GRC positions such as Information Systems Security Officer (ISSO) and Security Control Assessor (SCA). All under the GRC umbrella. Here are the links for those trainings: ISSO training: www.cyberfirstacademy.com/information-system-security-officer-training SCA training:www.cyberfirstacademy.com/8f143867-f63c-4510-b48e-f5f6602e2ef5

@@pittypat6321 Hi. Here’s the link for GRC Analyst training www.techpreneursclub.com/apply-with-techpreneurs-club-oa There are other GRC positions such as Information Systems Security Officer (ISSO) and Security Control Assessor (SCA). All under the GRC umbrella. Here are the links for those trainings: ISSO training: www.cyberfirstacademy.com/information-system-security-officer-training SCA training:www.cyberfirstacademy.com/8f143867-f63c-4510-b48e-f5f6602e2ef5

Thanks.I have some in the works

It's always good to get experience but even those that have experience got trained first, then they applied what they learned plus what they picked up on the job to gain experience. I would say get training first.