Cyber Security Day in the Life Work Vlog | Remote GRC Cybersecurity Analyst Vlog 2024 

🫱🏾‍🫲🏿

I use a lot of different tools with in my role. I can’t name specific tools but I can make a video explain skills and types of tools you’ll be utilizing in this role. Yes I learning splunk in my bootcamp but I wouldn’t say it’s mandatory. It’s a good to know type of thing. I will be making a Q & A video going more in depth so ask me what ever questions you have in the comments.

No & Yes. Almost no GRC analyst will be doing anything remotely related to red team (hack the box stuff) or blue team (splunk log reviews). However, these skills are very much nice to have. To give an analogy. Your question is, I want to work at a restaurant at the front of the house but I am learning to make sushi and make fresh pasta. While it is a great skill to know how to make sushi and fresh pasta; it's not really relevant to front of house. GRC work is closer to project management than it is to being a "hacker". While you do need to know how technology and infrastructure works to be effective at your job, you're almost never touching the actual tools (unless you're an outlier). Traditionally most GRC people I have come across are former accountants or paralegals etc, so its not really expected for the average GRC analyst to know how stuff really works; its been traditionally a check box type of job. It's much closer to project management in making sure that people are doing what they are suppose to be doing, making sure processes are effective and then presenting any findings or progress to stakeholders.

@@RespectfullyCurious thanks so much for the detailed response. That's definitely helpful.

​@@RespectfullyCurious Love this detailed explanation on GRC. I'm currently working in the commercial property management industry where I'm responsible for all the access controls (creating users access accounts, provisioning and deprovisioning access fobs) and providing technology and AV support for meetings, managing day to day operations etc. I'm looking to get into Cybersecurity GRC - any insights from you will be appreciated.

Technically you don't need anything but it would help to be an effective analyst if you have skills and experience in: - Project Management - Auditing - Communicate efficiently - Microsoft Excel + Word + PowerPoint - Microsoft ActiveDirectory - Networking - Security essentials - Infrastructure basics Cloud or OnPrem - Understanding of potential legal, regulatory or framework requirements

GRC is essentially a jack of all trades so there’s a lot to do or learn

hey I am getting into the field myself, and a recurring answer I see, is tho develop a passion and research everyday. Then also depending on what side this field is certificate/ mainly experience heavy

Unlimited PTO is a scam to trick employee's in to thinking they are getting a deal of a lifetime, its purely there so companies don't need to put money aside for everyone's PTO that they would need to pay out should an employee leave the company, by offering unlimited PTO, companies have just increased their cash flow dramatically and can spend your PTO money they otherwise need to keep aside. Unlimited PTO is also at the discretion of your manager, you still need to ask permission now to take time off and your manager can say "no", you no longer have the "right" to take your PTO regardless of what your manager says, dont be fooled thinking they did it for you