Careers · Governance, risk & compliance · Released October 2026

Hired in GRC by Kai London

Governance, risk and compliance is one of the most accessible routes into cybersecurity, and one of the least explained. This book shows what GRC professionals actually do, the skills that get you hired and how to prove them before your first role.

What the book covers

What GRC work looks like

Policies, risk registers, audits and controls — the day-to-day reality.

Frameworks to know

ISO 27001, NIST CSF, SOC 2 and the regulations employers ask about.

Building a portfolio

Practical projects that demonstrate GRC skills to employers.

Certifications

Which credentials help at which stage — and which can wait.

CVs and interviews

Presenting transferable experience and answering common interview questions.

Your first ninety days

How to add value quickly once you are in the role.

Career guidance in this book is general; requirements vary by employer, sector and country.

GRCCareersISO 27001NIST CSF

Who it is for

Career changers, graduates, auditors, project managers and IT staff who want to move into governance, risk and compliance.

About the author

Professor Kai London — CISSP, CISM.

An internationally recognised cybersecurity executive, board advisor and Founder & CEO of Quantum AI Systems Security LLC, writing at the convergence of AI, governance and operational resilience. Honorary Professor and Researcher at UCL.