u/RangeAlert9905

• Teaching: Is the faculty teaching security subjects actually specialized in security, or general CS faculty assigned to it?
• Labs: Is there a dedicated security lab (Kali machines, vulnerable VMs, isolated network), or just regular CS labs?
• Hands-on vs theory: Do you get real tool practice (Wireshark, Metasploit, Burp Suite) in coursework, or is it mostly exams?
• CTF/club: Is there an active, competing CTF or security club — or is it inactive/on paper only?
• Placements: What roles have actual Cyber Security branch grads landed — security-specific, or just generalist SDE via the same recruiters as every other branch?
• Free time: Realistically, how many free hours per week does the schedule leave for self-study?

1. How strict is attendance in practice - any grace, and how much free time do you realistically get outside exam weeks?

2. For CSE (Cyber Security) branch: is it worth it, or mostly relabeled CSE with weak faculty depth? Any hands-on labs/ CTF/security club on campus?

3. Has anyone landed a GRC/risk/ compliance/security-analyst role specifically (not just general dev/ consulting) at Deloitte, PwC, EY, KPMG, or banks like JPMorgan/HSBC through campus?

4. Anyone managed certs (Security+, ISO 27001, CEH) during college - how'd you fit study time in?

5. Knowing what you know now, would you pick the Cyber Security branch over core CSE for this goal?

Hi everyone,

I'm 18 years old and currently planning my career path. I've recently become interested in Governance, Risk, and Compliance (GRC), particularly roles in Big 4 firms like Deloitte, PwC, EY, and KPMG.

Most people around me are pursuing software development, AI, or other coding-focused careers, so it's been difficult to find guidance from people who actually work in GRC, IT Audit, Risk Advisory, or Compliance.

My goal is to build a career in cybersecurity GRC, gain relevant certifications and experience, and hopefully join a Big 4 firm after graduation. Long term, I'd also like to explore international opportunities.

I had a few questions for those already working in the field:

1. Is GRC a good career choice for someone starting today?
2. What are the biggest pros and cons of working in Big 4 GRC/Risk Advisory?
3. If you were 18 again, would you still choose this career path?
4. What skills, certifications, internships, or experiences should I focus on during college?
5. How does long-term career growth compare to more technical cybersecurity roles?
6. How much does college brand/name actually matter for getting into Big 4 GRC? For example, does graduating from a top-tier college give a significant advantage, or can someone from an average college still compete if they build the right skills and certifications?

I'd really appreciate hearing from people who have firsthand experience in the field. Thanks for your time and advice!

Hi everyone,

I'm 18 years old and currently planning my career path. I've recently become interested in Governance, Risk, and Compliance (GRC), particularly roles in Big 4 firms like Deloitte, PwC, EY, and KPMG.

Most people around me are pursuing software development, AI, or other coding-focused careers, so it's been difficult to find guidance from people who actually work in GRC, IT Audit, Risk Advisory, or Compliance.

My goal is to build a career in cybersecurity GRC, gain relevant certifications and experience, and hopefully join a Big 4 firm after graduation. Long term, I'd also like to explore international opportunities.

I had a few questions for those already working in the field:

1. Is GRC a good career choice for someone starting today?
2. What are the biggest pros and cons of working in Big 4 GRC/Risk Advisory?
3. If you were 18 again, would you still choose this career path?
4. What skills, certifications, internships, or experiences should I focus on during college?
5. How does long-term career growth compare to more technical cybersecurity roles?
6. How much does college brand/name actually matter for getting into Big 4 GRC? For example, does graduating from a top-tier college give a significant advantage, or can someone from an average college still compete if they build the right skills and certifications?

I'd really appreciate hearing from people who have firsthand experience in the field. Thanks for your time and advice!

Tell me the eamcet clgs which gives more free time for students and not strict academic focused coz in my b tech i what to learn things which actual matters not some random outdated syllabus and all so for that there should be less pressure from clg side.