[Career] What is the education pathway to a risk management, GRC cyber security role?

If a newbie to cyber security had decided that cyber risk management and GRC was the best role for them what would be some pathways they could take in terms of education to land one of these roles?

career cyber cyber security cybersecurity education grc management risk risk management security