GRC is desperately needed, but you can't get in. What's the secret?

I'd love to know how I can break into GRC. Could anyone provide me any advice? I'm honestly kind of lost. I have 5 years of experience as a business analyst, in my last position I was really focused on data quality, auditing data sources, and making sure that people on our team were using data correctly. I don't think that's considered governance or risk even though I had controls experience.... But I'm just puzzled how I get in to …

advice analyst auditing business business analyst cybersecurity data data quality data sources experience grc lost love making quality secret