How to learn risk assessment?

TLDR: skiped almost all the traditional cybersecurity career paths and now I'm lacking risk assessment skills. how to learn it?
-----------

so, a little background about me:

I worked as a software developer since I was 16yo but always wanted to work with cybersecurity, started as a software developer because, in my country, we have a sort of associate degree that we can do together with the high school and doesn't exist a cybersecurity degree(only on bachelor level).

fast forward …

assessment cybersecurity risk risk assessment