Classroom · GRC Career Path

Unlock for $49

SOC 2 for GRC Job Seekers

Practice SOC 2 work through six Evidence Lab missions: scope a system, reconcile evidence, test controls, document findings, evaluate remediation, and present a portfolio project. Includes written case records, copyable worksheets, a worked review, and an optional reference library. For people with 1–2 years in GRC. Self-paced. $49 one-time. No individual grading or certification.

Module 0: Start Here

Start here before beginning the GRC Career Path curriculum. This module explains how the program works, what you’ll build, how to use the community, and how to represent simulated work honestly. By the end, you’ll have a clear learning plan, a baseline assessment, and a practical outcome to work toward.

Module 1: What GRC and Security Assurance Do

Learn what governance, risk, compliance, audit, and security assurance actually mean. This module explains the people involved, the business value of the work, and the common roles available across the field.

Module 2: The Risk-Control-Evidence Model

Learn the practical model that organizes GRC work. You’ll write clear risk statements, design controls, evaluate evidence, and distinguish exceptions from formal findings.

Module 3: Frameworks and SOC 2

Learn how frameworks, standards, regulations, contracts, and assurance reports differ. You’ll examine major security references and understand how SOC 2 scope, criteria, and reporting work.

Module 4: How Control Testing Works

Learn how to plan, execute, document, and conclude a control test. You’ll work from the control objective through population validation, sampling, evidence review, exceptions, and remediation.

Module 5: Build Your First GRC Portfolio

Apply the previous modules to a fictional SaaS company. You’ll scope the project, create core GRC documents, test a control, document an issue, and produce an executive summary.

Module 6: Turn the Project Into Career Proof

Convert your simulated portfolio into honest, specific career evidence. You’ll create resume bullets, interview stories, LinkedIn positioning, and a clear explanation of your practical work.

Module 7: Build Your GRC Career Plan

Target roles, certifications, networking, and your 90-day plan Turn your new skills into a focused career strategy. Build a practical plan for entering or advancing within GRC. You’ll choose a target role, evaluate certifications, create a weekly job-search system, and establish a 90-day development plan.

Module 8: GRC Labs

Practice real-style GRC work through hands-on simulations. In Lab 1, you’ll test a quarterly user access review, reconcile the account population, evaluate evidence, document exceptions, reach a defensible control conclusion, and create an interview-ready portfolio project.

GRC Interview Playbook

Prepare for GRC, IT audit, third-party risk, and security assurance interviews. Turn your experience into credible stories, explain risk and controls, handle realistic cases, and practice with structured mock interviews and scorecards. Includes 18 lessons, model answers, role-specific questions, and copyable preparation tools. Free for all members.

GRC Resource Library

Free resources for GRC resumes, certifications, frameworks, interview preparation, and job searching. Start with the resume resource, then explore the sections that match your next career step. For complete study and preparation guides, open the CISA Prep Roadmap, GRC Interview Playbook, and GRC Networking Playbook in the Classroom.

CISA Prep Roadmap

Prepare for CISA with a clear 6-, 8-, or 12-week study plan. Work through all five domains, improve question reasoning, and prepare for exam day. Includes original practice questions with explanations, study tools, certification guidance, and career next steps. Free for all members. Independent preparation resource, not an official ISACA course.

CISA Practice Questions

Prepare with a full 150-question CISA-style practice exam. Ten mixed-domain sections follow the current exam weights. Use a four-hour sitting or shorter study sessions, then review detailed explanations for every option and a domain scorecard. Original independent practice material, not official ISACA exam content.

GRC Networking Playbook

Build relationships and create opportunities through friends of friends, former coworkers, creator communities, and useful work. Learn how to make introductions, follow up with purpose, ask for referrals, and turn a real need into a proposal. Includes 16 lessons, copyable messages, a 30-day plan, and practical templates. Free for all members.

The GRC Employability Framework

Choose a target role, build relevant skills, show credible proof, create opportunities, and handle interviews with substance. This six-part framework connects the GRC Career Path courses you already have. Includes a self-assessment, an interview practice plan, and a 30-day action plan. Start here to choose what to work on next.

1-16 of 16