Complete GRC Entry-Level Interview Questions and Answers

[@Hey_Bahb]

This has been the most beneficial video that I have watched in launching my Cybersecurity career, especially in getting into a GRC position. If you are looking for some top notch information about blowing the competition out of the water in an interview in being prepared, this is the video to watch. As well as others for knocking your first 30/60/90 days in position out of the ball park and really showing your employer what you've got. This community has been a game changer in my career, and I cannot give enough thanks. I also recommend his GRC Analyst Master Class.

[@SimplyCyber]

Thank you so much. We hit the mark we were aiming for

[@HeleneKelbaugh]

What great review! Do you have a link for 30.60.90 days? Would love to watch.

[@PeacefulPrime]

I got my first GRC Analyst role Gerry and Erika! Thank you!

[@bsai3458]

Congratulations Peaceful Prime! Do you mind sharing what job titles you used in your search? Thank you

[@PeacefulPrime]

@@bsai3458 Thank you!!! I used GRC Analyst, associate grc analyst, associate information security consultant, associate grc consultant, etc. I use associate at the beginning of the title because that means entry level. I hope this helps!

[@meenuudt7477]

Could u share the interview questions asked for you in the interview

[@AM-mv6ro]

hey dude how has your first 4 months be?

[@DigitalLiquid]

How is it going? I just became aware of this career path.

[@samaakbr9241]

I love Erika. She’s brief and keeps me interested. I also think interviewers or hiring managers sometimes want that and not stories.

[@SimplyCyber]

Erika is awesome!

[@FranklinHicks-qs4gs]

you think shes purrrrrty

[@cybersandoval85]

I took the GRC analyst course. Started creating my own content with Loom. Thanks, Gerald!

[@sukanyasarkar3650]

Watched from start to end, made notes, and already implementing the recommendations!! Seriously looking forward to being a part of this community and entering the niche of GRC in Cybersecurity!! Thank you, Gerald and Erika!! Such good energy!

[@BigDaddy4Real]

You guys really rock! I’m about to go into GRC I am switching industries from the nuclear energy sector over into IT and I am so excited! I’ve already mastered GRC in one industry after 20 years in it. All of the things that you discussed will be extremely helpful, even though I will aspire for a medium to expert level in the industry having the experience that I do. Thank you so much! I have subscribed to you, and I will be waiting for your videos every day!

[@ertnyot784]

“What recent cyber incident could have been prevented and how would you have prevented it?” What a great question!

[@jcnwachuku]

Was referred to this channel by a friend I’m currently in finance and so far 14 mins in and I’m loving the interaction and the feedback thank you so much

[@SimplyCyber]

1000 videos on the channel and a thriving community. Welcome to the party!!

[@Cwhitlock-StudyGRC]

I've watched this at least 3 times already, a personal favorite from Gerry's content. Outpost Gray is amazing!

[@SimplyCyber]

Glad you enjoy it! I do wish i wasnt having a roof put on at the time....lol

[@robertg8936]

This has been invaluable! I've learned so much from this session.

[@BobBob-qm2bm]

There you go Gerry, there you go! Keeping it real and relevant!

[@emmanuelkehindei]

Watching this February 2023 and just enrolled in your Masterclass. Can't wait to dive in.

[@emmanuelappiah9167]

What master class, am interested?

[@emmanuelkehindei]

@@emmanuelappiah9167 GRC Analyst Masterclass

[@emmanuelappiah9167]

@@emmanuelkehindei Can you share a link for me?

[@emmanuelkehindei]

There you go!

[@visualglitchmusic]

I'm going for a GRC Analyst interview in two days, wish me luck!

[@SimplyCyber]

CRUSH IT 💪💪

[@joshuarichards9365]

@visualglitchmusic how did you do my friend, I hope you got the job 🍺🍻

[@visualglitchmusic]

@@joshuarichards9365 I got great feedback that I interviewed really well but due to my lack of experience not having done the role prior they had to pick someone who was experienced in GRC analyst (it wasn't an entry level position I applied for either, and I am still part way through my cybersec degree so I was surprised to get it) However, since I already work with the company and have been promoted once already, I've now personally met the managers and working with them on little side projects to show my willingness to learn, and they have invited me for a 4 month secondment opportunity in the cybersec operations team! So networking and putting yourself out there does go a long way, even if you face rejection they can see your motivation for the role!

[@newcovenantbeats]

@@visualglitchmusic how did it go?

[@jedreay]

Non-compliance is a teaching moment!

[@adjeleya1787]

Great video. Both of you did a great job with the presentation. Very informative and great pointers with the Q&As. Thanks for all you do

[@T-ACK]

Gerry is so pumped. I love it.

[@abdulwajeed8606]

Actual video starts @ 2:29

[@Privyone]

This was so helpful. Thank you Gerry and Erika.

[@LTisback]

Hi I see you wrote this 5months this ago, may I ask how your journey is going? Did you get to find your first role with these interview tips?

[@nadegenicolas3963]

This was awesome and great presentation from you and Ericka. I would like to pivot to GRC and I have been taking some certifications on LinkedIn to familiarize myself with GRC. I am looking forward to taking your mastery class on GRC and by the way I enjoy your great content on GRC. By the way I work as a case manager in behavioral health field, do you think someone in my current field would be able transition into GRC. Thank you for your response

[@QompleteFreedom]

New to the channel! You have some great info and insights that will help me transition into cybersecurity grc.

[@rachael862]

Amazing ❤❤❤

[@FaLkraydz]

If I work as Information Security Analyst under the NIST standard, GLBA, SOC 2, can I put them on my resume if I understand the concepts even though I don't work as a GRC analyst and never been part of planning anything on the business side?

[@majamoore6209]

Qualysguard Training Qualys offers free training on Policy Compliance, PCI Compliance, Vulnerability Management, EDR

[@judahtunes2245]

Did you do it? ... its very entry level and doesnt go into much detail. more based on using the qualys platform to implement.. not much on the framework... I did do it and got the cert.. still helpful however

[@majamoore6209]

​@judahtunes2245 Yes, I agree with you. Still a good certificate of completion to have. I took some of their points and just did my own deeper dive on several of the topics. I think it is a good place to start. Again, the way the course is written makes it hard to read. The sentence structures and grammer used are a bit off.

[@theredbaron057]

Erica’s quements at 38:50 we’re spot on, ask questions, identify their goals and learn about the environment

[@kimberlycanfixit]

This was THE BEST! #GRClife

[@omaralvarez1046]

Great Video. Thanks for putting this up.

[@Mrjonespeaks]

Great live session!!! I think you have a background noise on the recording. Thought I bring to your notice.

[@nexusnrg]

Completely off-topic, but I am curious what was that knocking tapping sound that parodically happened all throughout the video? EDIT: NM I finally got to the part where you said you had roofers.

[@Cyber_Pharm]

Thank you for this

[@SimplyCyber]

Any time

[@Thereal_BlackPanther]

Thank you guys I Am excited

[@fahale0]

Might be nice to throw in something about behavior based interviewing.

[@wholesalingtony1588]

I have my security + cert and want to know, is there a GRC certificate that I need to get in order to obtain a job?

[@kennethenajuke6397]

I have a 2nd stage interview with my potential boss's boss. The hiring team on IT risk analyst role.

[@SimplyCyber]

Crush it. Watch risk assessment; job interview; videos on channel. Should help. Get it!!!

[@IamOnlyaHumanafterall]

Hey Gerald, thank you very much. I am trying to break through into GRC, I see that you have done an amazing job in compiling the GRC master course, is that course good enough to gain knowledge and get a certification from ISC2 ? Looking forward to your valuable response - Thanks once again.

[@SimplyCyber]

The isc2 one is aligned w the phases in NIST 800-37, which is good. My course does cover that but also so much more. My course isn’t designed to be a study aid for any certification, it’s designed to give you the skills and knowledge expected of an entry level grc analyst.

[@IamOnlyaHumanafterall]

@@SimplyCyber Thank you very much Gerald, appreciate it ..I have now purchased your master course and pursuing it now.

[@KarizmaHanshaw]

Hey Gerald And everyone! I have a interview for a compliance analyst role and the recruiter advised that it will be technical and to provide examples. Are there any tips you have?

[@SimplyCyber]

potentially auditing technical systems and the approach to that; not exactly one to one but scanning assets to determine compliance with configuraiton standards; actually using a benchmark/STIG and configuring a system to be hardened. theres 3.

[@KarizmaHanshaw]

@@SimplyCyber thank you 😊

[@OluchiZelda]

Hi. Where do we find the GRC course you spoke of here

[@SimplyCyber]

academy.simplycyber.io/p/the-definitive-grc-analyst-program

[@Snake00085]

#replayteam great info

[@mandiij6]

lol this was so good!

[@bayomabo3646]

Brilliant video, thx a lot but what's that irritating sound in the background that sounds like someone is tapping a table??

[@SimplyCyber]

i know right! i was getting a new roof put on.

[@chrism9356]

Thanks Gerry and Erika, I'm putting this into action soon! great tips!

[@LTisback]

Any luck?

[@ojohnbobby6760]

I want to enroll in the GRC master class. What should I do.

[@SimplyCyber]

Go to SimplyCyber.teachable.com

[@azukaabrahamnduka5242]

Where can I find GRC jobs living in Nigeria

[@rreed336]

Thank you.

[@normanzjames]

Erm...so you talked around the question "how do you stay current in cyber", but you didn`t actually asnwer it...would be helpful to actually know the answer

[@SimplyCyber]

Jon the daily cyber threat briefing at 8am est simplycyber.io/streams

[@georgejones5019]

Stay up to date on news and events, keep certs current. Learn new tech and apps that are relevant.

[@CyberAl-gr2cj]

Easy, just see which airlines or company is being hacked lol.

[@Techtapp_]

What is the knocking in the background

[@SimplyCyber]

Roofers putting new shingles on

[@dianarodriguez6026]

Just FYI: Vosotros is not Us but You (in plural) ;)

[@SimplyCyber]

Thank you.

[@Ghuttora7]

The casino phishing attacks

[@WilsonAda-f8z]

Katarina Loop

[@AgnesColeridge-s8m]

Jonatan Estates

[@TanicaTilley]

So much knocking in the video is making it really hard to concentrate on what is being said. I am good at listening and taking out surrounding noises, but this was in my ear loud and annoying. I just wished I could have listened to the whole video

[@SimplyCyber]

Apologies. I was having a new roof installed and couldn’t reschedule

[@HumphreyDoreen-r4c]

Treutel Dam

[@FranklinHicks-qs4gs]

good googly moogly woman

[@poorinvestor]

What’s all the banging?!?

[@SimplyCyber]

Roofing being installed

[@anshug506]

What is that irritating knocking sound every now and then during the video?

[@SimplyCyber]

i was having a roof put on my house right above me. Couldnt do anythign about it, the show must go on!

[@gettons1980]

@@SimplyCyber you could have simply postponed the stream. The show can wait, it's not an emergency room, is it?

[@omox251]

@@gettons1980 🤣

[@graceaire3944]

@@gettons1980 must you talk! At least you heard what he said! Rather Putting unnecessary comment.

[@redlinejoes]

@gettons provides valuable feedback for the content creator. The stream was challenging to follow with the repeated banging. Some viewers could not find value in the content because the mic picked up distracting background noise, but that's not the viewer's fault. Please be tolerant of your peer's feedback. Gerald can always redo the content and also reconsider his noise-cancellation technology. Some solutions could have potentially saved this stream. People can be empathetic to both the creator and the customer/consumer. The first mistake an entrepreneur makes, is not listening to their customers.

[@internetmemeplace6886]

How tf is grc analyst entry level???