Working in GRC

I am fairly new to information security, with 12 years in IT doing helpdesk, backup administrator to jr. sysadmin. Recently, I got involved doing PCI compliance for the company (a small organization) and found it super interesting.

I've been reading risk management, BIA, and BCP/DRP, and my backup admin experience helped me understand those topics. I am looking to transition to GRC but am not sure how to go about it. I do not have a solid information security background …

cybersecurity grc working