Description

Drawn by the excitement of the early 2000s tech landscape, Renae chose to transition from an entirely different field – journalism to the cybersecurity industry. In this episode, we are uncovering her experience of starting in this industry as a very beginner to what she feels now as an experienced professional.

GRC often faces perceptions of being unexciting and undervalued compared to development teams – and Renae is no stranger to this conception.

However, as a project manager who’s lead several security projects – she has seen the role evolve and is sharing how the real value lies in understanding optimal solutions and collaborating closely with teams to innovate.

That’s not it though, we are going deep and hitting Renae with just the right questions – who wins in GRC – a pushover or a hard ass? What are the implications of assertiveness and empathy in long-term GRC success?

If you’re interested in learning her thoughts on these topics, then don’t forget to tune in to our seventh episode of Risk Grustlers!

Highlights from the episode

• Transitioning to information security industry and navigating the GRC space
• Balancing collaboration and assertiveness while executing risk management activities
• Understanding the security budget for establishing a minimum viable risk program in growth-stage companies

“I've learned from past experiences that when flashy tools were brought in without the necessary structure and support, it often led to issues. There's no magic solution in a tool alone; it requires knowledge and effort to work effectively. Establishing a strong foundational risk program comes first.”

‍