3 Levels of Cyber Security GRC jobs (Progress Explained)

Use code 'UNIXGUY' at nordpass.com/un... to get NordPass Business with a 20% off! The coupon applies to all new Business plans.
Start a non-Technical Cyber Security Career! Get lifetime access to GRC Mastery Training Course: grcmastery.com
Follow me on LinkedIn:
Personal Profile: / abedhamdan
UnixGuy (KZbin Page): / unixguy
GRC Mastery Page: / grcmastery
Follow me on Facebook:
/ unixguycyber
Follow me on TikTok:
/ unixguy_cybersecurity
Follow me on Twitter/X:
/ unixguy_cyber
FREE Weekly Cyber Security Career Newsletter:
unixguy.com
You can buy me a coffee:
/ @unixguy
TimeStamps:
01:51 Level1
07:26 Level 2
11:26 Level 3
17:23 Bonus Level
18:35 GRC Training

[@UnixGuy]

Use code 'UNIXGUY' at nordpass.com/unixguy to get NordPass Business with a 20% off! The coupon applies to all new Business plans.

[@NatalieAForbes]

Thanks for starting this channel, I'm now studying CC at ISC2

[@TheBuzzbyFamily]

I have a GRC interview next week

[@UnixGuy]

Thats awesome good luck! honestly, smash through GRC Mastery. finish as much as you can of the course before the interview, it’ll help you answer the scenario based questions: kzbin.info/www/bejne/eWesmJ6pd9WAfJYsi=qvEKMQe1gZ45TtVs

[@Joek9100]

Gl

[@JobEasy-q7v]

Buddy, can you please share your resume by removing your personal information. Please, man. I am dying with 0 calls.

[@UnixGuy]

@@JobEasy-q7v you may want to watch this (it has a free resume): kzbin.info/www/bejne/qKuTg39qjdqYY6M Also a resume alone wont get you interviews. If you want to work in GRC you need to learn GRC properly: kzbin.info/www/bejne/eWesmJ6pd9WAfJY

[@AnokataHD]

Good luck🎉

[@tiffbritt21]

This definitely came at the right time because thanks to your videos and course I officially landed a GRC role!! I’ve been on the cyber journey for a while but once I finished your course, I took the plunge to start applying and a month a half later I landed my very first role!! I can’t thank you enough for sharing all of your knowledge and I can’t wait to put it all into action.

[@UnixGuy]

Huge congrats my friend!!!! well done!

[@tiffbritt21]

@@UnixGuy thank you so much!

[@kdgod21]

​@tiffbritt21 whats your new jobs title? Congratulations!🎉

[@aaronlewis6653]

How has his course helped you land the new role ?

[@tiffbritt21]

@@aaronlewis6653 his course is very thorough when going over all the elements that encompass GRC. When he says that’s all you need he means it. Of course you can do further study and look at other more specific courses on the different topics like if you wanted to dig more into specifically risk management you can totally do that but it was enough for ME and with his cap stone project that was something that was a good highlight in my interview

[@j_mod_videogames7765]

Looking to start your GRC course this weekend hopefully!

[@UnixGuy]

Best of luck!

[@vaughnforsythe]

Your videos are like the perfect 3 course meal. Thank you again.

[@UnixGuy]

🙏🏻

[@XTCIII]

Hey Mr.UnixGuy Can you make a video about Cloud Security career path for amazon web service / Microsoft Azure ♥️

[@UnixGuy]

I already have, look through my existing videos

[@Jussomerando677]

Thank you as always. I’m currently doing Josh’s course. As soon as I’m done, I’m doing yours.

[@UnixGuy]

Good luck with it all 🤝🏻

[@TradewithRaymond]

Awesome quality information.

[@UnixGuy]

Glad it was helpful!

[@JeffreyJohnny]

Informative video as always! You talked about reading penetration test results, as a GRC analyst what course do you have to take in order to be able to understand penetration test result correctly. Thanks!

[@UnixGuy]

Within GRC Mastery, I go over important frameworks like the OWASP Top 10 which will expose you to common vulnerabilities. As for understanding reports, to be honest a good penetration testing report will include name of the vulnerability/finding and how to fix it so sometimes they can be self-explanatatory but you will always need to go and google/readup on the vulnerability itself , you dont need in-depth knowledge specially at level1 now for courses, honestly following any roadmap on my channel will give you that! So doing any basic pentesting course like eJPT will cover all of that (and some) , but a lot of the attacks are also covered in things like the google cyber cert, tryhackme soc1 , etc. Basically after GRC Mastery, the more, ‘cyber knowledge’ you gain the better off you will be :) plus, acknowledging the fact that you will always need to do a lot of googling/research on the job itself

[@reverrrb]

Great talk at Bsides today, inspired to start the cyber journey :)

[@UnixGuy]

thank you so much for coming 🤝🏻

[@jay2004r]

Great video! Can you make a video about how to become a cyber security architect from scratch ? Or the pathway including what courses and knowledge you need to become a cyber security architect ?

[@UnixGuy]

security architect is pretty much what was explained in this video level3, you need tons of experience, GRC knowlegge, and broad cyber knowledge in a few domains

[@Ricocase]

Great video! What options exist for CISSP associates?

[@UnixGuy]

it’s a training that covers a broad range of topics from a theoritical point of view.

[@bradfeldt4406]

Started the GRC course last week. So far so good! I’ve been in healthcare as an RT for 12 years now. Would I be able to apply for GRC roles after I complete the course or is there something else I should get before applying? Thanks again!

[@UnixGuy]

well done on starting learning! yes you can (and should) start applying right away but you also shouldn’t stop learning, so once you finish it, start applying but also start studying for something else :)

[@Thiccolo]

I am following you ethical hacking roadmap, Is it necessary for pen testers to have some GRC experience or do some GRC projects? Do you think it would help landing a job, or do you think targeting red team skills is more important at least in the beginning.

[@UnixGuy]

its not needed for pentesting jobs, but you can come back and do it once you’re done with the roadmap :)

[@varma9114]

Hey @UnixGuy today i passed the isc2 cc exam. i'm assuming to learn CompTIA Sec+ exam to get a job in l1 soc analyst role. Can you provide any guidance to me like is it better to get another certification also. Waiting for your reply ✋

[@UnixGuy]

kzbin.info/www/bejne/qKuTg39qjdqYY6M

[@k.j.o.o]

As a beginner which role should i focus on since there are so many roles eg Cloud Security Engineer, Security Engineer, Cyber security analyst etc. Please help

[@UnixGuy]

Generalist roles, follow this: kzbin.info/www/bejne/qKuTg39qjdqYY6M

[@venugopald4147]

I am able to map the need of GRC certification who wants to pursue a career with the blue (defensive security) team jobs..... On the other hand, the red (offensive security) team takes care of jobs like penetration testing....

[@UnixGuy]

I don't understand your comment

[@venugopald4147]

​@@UnixGuy: our defensive security (blue team) activities, we focus on risk management, guided by threat assessment reports. We assist in designing data security concepts that align with GDPR compliance, and also perform vendor assessments for third-party solutions with respect to security. These tasks align with the Governance, Risk, and Compliance (GRC) framework, where in-depth technical expertise may not be essential. On the other hand, the offensive security (red team) in our organization conducts penetration testing, which involves ethical hacking. This area demands detailed technical knowledge for identifying vulnerabilities and testing system defenses.

[@UnixGuy]

@@venugopald4147 👍

[@patriciopereyra7143]

So the names of the positions you provided are different to the ones in Comptia career path. Does it matter? Or do we just pay attention to the requisites when applying. They have for example Security Engineer. Thanks.

[@UnixGuy]

Comptia is just genetic stuff, like I said titles are messed up :) this is specitic more to GRC

[@danbadra169]

Hi Unixguy! First of all, thanks for the great content, your videos are helping me a lot in a transition from developer to cybersec. I have just been selected to work with a group that will implement ISO 27001 on the company I'm currently working. Can that be considered a first GRC job to put on the CV? Trying to break into GRC. Since I'm also a lawyer (turned programmer), I think this career would fit well with this different set of skills.

[@UnixGuy]

Hey! yes this can be the start of a GRC career, your current skills will definitely be an asset! Watch this: kzbin.info/www/bejne/eWesmJ6pd9WAfJYsi=qvEKMQe1gZ45TtVs

[@cyberaddict1010]

Hey awesome content! Could you please tell me which industries GRC professionals can work apart from big4 cos as the work-life balance there is traumatic?

[@UnixGuy]

GRC professionals work in financial instiutions, government, healthcare, and most organisations.

[@skylore4717]

Hey UG, I have studied a lot of the materials that you have graciously provided. Alhamdulillah, I've managed to land an interview in a role relating to an auditor, however, for grc related, are there any specific positions that I should search for as a lot of the company in the IT sector in my country reserves such role for senior and manager level

[@UnixGuy]

An auditor role is indeed a GRC role! I cover Audit in an entire module in grcmastery.com :) once you get some audit experience you’ll be able to progress to more senior roles

[@saqlainmuradraja9877]

I have a question , do you think to break into the field of cyber security, intelligence analyst role can be a good starting point , make job is to use osnit to secure a company various sites and with this I can tell them importance of GRC and in future can start as a GRC analyst within the company?

[@UnixGuy]

people dont usually land jobs by doing osint on companies. You’ll need to learn cyber security and apply to job: kzbin.info/www/bejne/qKuTg39qjdqYY6Msi=nqghuz4W3b8OQAoR

[@dsyoung5242]

I have taken your GRC course can you update the job section i feel like the resume you provided there is just a basic word doc with no real good structure also the main capstone is not on the resume as a project to show off your skills to potential employers.

[@UnixGuy]

you emailed your concerns before, and i understand you don’t like the template, but it is a proven resume template that a lot of people have used. A good resume template is clean and succint, it is called a ‘template’. Looks like you have a different expectations on what a template is. You need to put your own experience using your OWN words. You need to also describe the capstone project in one line. This is what a ‘template’ is, and those templates are usually sold individually for $50 to $200+.

[@justanoob111]

Give us an example of a better template thats proven to work.

[@oneofmanyte3321]

@@justanoob111 he has

[@coCoworker-l5m]

Hello unix guy I'm confused Thank you so much for your hard work and your videos to help us I'm new to cybersecurity and I watched two videos for you 1- FASTEST way to become a Cyber Security Engineer and ACTUALLY get a job - UPDATED (2024) 2- How I Would Learn Cyber Security If I Could Start Over in 2024 (6 Month Plan) Any plan I start If I am a beginner and want to get my first job as a Cyber Security To note : I really like the technical part But if I were to start with GRC and then switch to the technical side I'm accepting the most important thing to get into this field.

[@UnixGuy]

follow number 2. yes learn GRC and you can do anything after :)

[@coCoworker-l5m]

@@UnixGuy You're an amazing person with a kind heart, and thank you for everythin❤😊

[@aaronlewis6653]

Can anyone speak to his course ? I’ve very interested but I have been burned once and I’m trying to do my diligence!

[@UnixGuy]

grcmastery.com , I’ve left screen shot from people who did it, also go follow GRC Mastery on LinkedIn and click on ‘page posts’, you can see people who did it and what they post about it, you can also ask them :) good work on doing due deligence 👏🏻

[@cobraflunkie]

@UnixGuy, if I were to get a GRC spefic role as a 1st role in Cybersecurity but my goal was a techical role like a SOC analyst would it be a good idea to take a GRC role? Am I likely going to be able to pivot to a technical role after?

[@UnixGuy]

you can do that but it’s not mandatory. You can also land a generalist role where you get to do more than one thing. That’s what this plan is for: kzbin.info/www/bejne/qKuTg39qjdqYY6Msi=kDDaFkrU9sZlNzCK

[@cobraflunkie]

@@UnixGuy thank you for the reply.

[@mycloudsecurityjourney]

Hi UnixGuy thank you for a great video, would you like to create video on how to handle politics beautifully in cybersecurity? thank you

[@UnixGuy]

you may find this video useful: kzbin.info/www/bejne/bmeyZHh6lL6tnZI

[@mycloudsecurityjourney]

@@UnixGuy thank you! I ordered the books: Discipline is destiny & So good they can't ignore you 📚