What after TPRM?

Hi Security Folks!

I have been doing TPRM for past 5 years now. During my tenure I have also worked in Issue Management - working on reviewing & approving remediation action plan/Security Policy Exceptions.

I am CISA and CRISC certified. I am confused as to what should I be doing next ? My goal is to gain grow with good experience within Information Security and increase my marketability to ensure job stability. Please guide.

action amp certified cisa crisc cybersecurity doing goal issue management next policy remediation security security policy tenure tprm working