Career decision. Governance, Risk and Compliance domain.

Hi Everyone. I'll keep it brief. My experience

Penetration Tester - 2+ years

Backend developer - 2+ years

Aspiring to be a CISO. Hence, I’m thinking of getting into the GRC domain in cyber. I’ve few questions.



1) What is the starting point for this? Certifications? If so, what's the certifications and their order?



2)What can I expect from this domain?



3)People working in this domain, can you please comment so that I can connect with you?



All your help …

backend career certifications ciso compliance cyber cybersecurity decision developer domain experience governance grc penetration point questions risk risk and compliance thinking what is