u/Main_Class8520

I’ve been noticing a pretty big uptick in GRC job postings lately, especially remote positions.

It feels like cybersecurity always has a “wave.” First it was everyone getting Security+, then it seemed like everyone was trying to break into SOC roles, and now I’m seeing GRC everywhere.

Is GRC becoming the new wave in cybersecurity? For those already working in GRC, are you seeing the field actually grow, or is it just getting more attention right now?

I’m curious to hear from people who earned their CISSP. What kind of impact did it have on your career?

Did you notice more recruiters reaching out or start getting more interviews/callbacks after getting certified? Did it help you land a job, move into a higher-level cybersecurity role, or increase your salary?

Also, for anyone who was struggling to get callbacks before the CISSP, did you notice a significant difference after adding it to your resume/LinkedIn?

Just trying to get a realistic idea of how valuable the CISSP has been for people in the job market.

I’m currently using Jason Dion’s CISSP course, and after each lesson he has practice questions. Honestly, they seem a lot harder than the questions in the Official Study Guide and Official Practice Tests.

For anyone who’s taken the CISSP, how do Jason Dion’s practice questions compare to the actual exam? Are they intentionally more difficult, or is the real exam about the same? So far, the OSG questions seem a little easier to me, so I’m just curious what everyone else’s experience was.