CISA vs CISM

I’m looking at an internal role on our third party risk team with a long term goal of a more specific GRC/BISO role. Our company lists CISA or CISM for both roles.

For anyone that has both, is one easier? Is one more valuable to have? I see Thor has a CISM course and I really enjoyed his teaching style, there doesn’t appear to be much out there for CISA beyond their own book/questions. Appreciate any advice!

cisa cism cybersecurity