20 Years In Finance. Zero Right Answers. Hired Anyway | Guest: Sunil Karir

20 Years In Finance. Zero Right Answers. Hired Anyway | Guest: Sunil Karir

Source: YouTube · GRC Engineering Club · published Aug 16, 2026 · 57:06

Compliance & GRC
No ratings yet Log in to rate
Transcript Available
Description

BLUF: GRC engineer Shanil shares his pivot from 20 years in finance into cybersecurity, showing how immigrant work ethic, hustle, and technical awareness—not shortcuts—drive career success 0:39.

Key Takeaways:
• After a finance layoff, Shanil earned basic certs and applied to 10 jobs daily; a director hired him despite failing every technical question—because of his attitude 1:52
• Volunteering for an ISO 27001 project revealed GRC fit his audit background; mentor boss Paul taught him InfoSec and pushed continuous self-development 5:11
• Both hosts credit immigrant parenting—4 a.m. paper routes, family shops, "coasting is a luxury afforded to others"—for instilling discipline and the drive to outwork everyone 9:41
• Breaking in today demands technical awareness over cert collecting: read code, understand cloud, use AI wisely, and link GRC controls to continuous monitoring 29:28
• Certs add bargaining power only with real work—"do the work before it"—and apprenticeships, plus GDPR/privacy knowledge, beat chasing shortcuts like the CEH-to-six-figures myth 33:48, 54:20

Hard work, curiosity, and learning in public can carry anyone into cybersecurity—at 52, Shanil asks, "what's anybody else's excuse?" 35:57

Sources:

  • 0:39 Intro and GRC club background
  • 1:52 Finance-to-cyber pivot story
  • 5:11 ISO 27001 project and mentor Paul
  • 9:41 Immigrant work ethic stories
  • 29:28 Technical awareness vs. certs

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Compliance & GRC. Commonly maps to: Security and Risk Management, Asset Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Welcome to another exciting edition of the Anti-Check Blocks podcast. I'm joined today by someone who I in my professional career I always seek out people like this. So, I think this is kind of faded, right? Like somebody who's been in the game for a bit. I want to learn. I want to hear some war stories and yeah, man, when somebody like Abdi says, "Hey, this guy has a wild story." I pay attention. I make space in the calendar and I want to sit and listen. Shanil, introduce yourself. Let the folks know who you are. If they don't, they've been living under a rock because you're pretty active, I feel on the Slack. But but for the two that haven't paid attention, let them know. >> Yeah. So, I'm I'm Shanil. I'm part of the uh IT GRC engineering club. So, when I got into it maybe a few months ag…