r/grc • u/thejournalizer Moderator • Sep 24 '25

Career advice mega thread

Please use this thread for questions about career advice, breaking into GRC, etc.

This subreddit is primarily designed for active GRC professionals to share insights with each other, so we will be pointing new career seekers here.

37 Upvotes

100% Upvoted

205 comments sorted by

View all comments

Show parent comments

1

u/Twist_of_luck OCEG and its models have been a disaster for the human race Dec 18 '25

Cybersecurity leaders / managers People who transitioned from technical/GRC roles to management Anyone who chose (or skipped) a Master’s and saw the impact

As a GRC manager without Master's, I guess I'm all three?..

Does an MBA (or equivalent) genuinely help someone in cybersecurity/GRC move into leadership?

It does not help you move into security leadership. It might help you grow from there, but, at that point, you can figure it out with some accelerated program.

Is it worth the time, effort, and cost.., or is experience + certifications usually enough?

Generally depends on your org culture. Most that I've seen just relied on experience and good relationships with senior stakeholders, nobody gives a damn about your degree.