The Non-Coding Cybersecurity to GRC Portfolio Roadmap

The six-step guide that shows career changers and recent graduates how to move into GRC and build work employers can actually see.

See the six steps from choosing your direction to job readiness
Learn the five signals hiring managers look for in entry-level GRC candidates
Discover the six portfolio pieces that prove you can do the work

What is inside

Six steps in order, so you are not collecting disconnected courses or guessing what to do next. Plus the skills that matter in GRC, the six portfolio pieces employers recognize, ISO/IEC 27001 alignment, and the optional Foundation exam path.

Step 1

Choose the right path

Identify the non-coding cybersecurity roles that fit your strengths.

Step 2

Understand GRC

What governance, risk, and compliance mean, in plain language.

Step 3

Learn what the work involves

The responsibilities found in GRC, audit, policy, compliance, and vendor risk roles.

Step 4

See what employers want

The five signals that tell a hiring manager you are focused, prepared, and ready.

Step 5

Build work you can show

The six portfolio pieces that make your thinking visible.

Step 6

Prepare for the job search

Organize your portfolio, strengthen your resume and LinkedIn, and prepare to discuss your work.

Written by Dr. Rose Shumba

Cybersecurity Educator & Computing Professor

Former Cyber Science Professor at the United States Naval Academy, with more than 20 years preparing students and professionals for cybersecurity careers. She has passed the PECB ISO/IEC 27001 Foundation examination.