Ten Years In GRC Without A Single Certification | Guest: Pradeep Reddy
Source: YouTube · GRC Engineering Club · published Sep 13, 2026 · 36:02
BLUF: Praep shares his unconventional journey from finance to Governance, Risk, and Compliance (GRC), emphasizing that effective mentorship relies on practical, documented skill-building rather than certifications or job guarantees 3:33. He advocates using frameworks like NIST CSF to guide development and warns against programs promising guaranteed employment 30:04.
Key Takeaways:
- Praep entered security through IT audit at KPMG after a finance background, noting real learning happens through on-the-job experience and networking rather than certifications 0:31.
- Effective mentorship requires gauging a mentee's seriousness and background early, often using forms to understand their goals before committing time 19:33.
- He stresses maintaining shared documentation to track skill development and keep the learning journey consistent 21:05.
- Mentorship is bidirectional: mentors stay current with new technologies and workforce trends by engaging with younger professionals 15:53.
- Prospective mentees should beware of programs promising 100% job guarantees, which are often exploitative and unrealistic given market dynamics 30:04.
The NIST Cybersecurity Framework (CSF) is an invaluable tool for mapping specific skills to target roles, helping identify precise development needs 25:53. Praep closes by offering free mentoring slots to dedicated candidates, reinforcing his commitment to impact-driven guidance over commercial gain 34:02.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Compliance & GRC. Commonly maps to: Security and Risk Management, Asset Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Welcome friends to another edition of the anti-checkbox podcast. I am excited for the subject that we're going to get into today. It's something Well, I I'll let Praep take it away in terms of what we're driving into, but I'm super fired up to get into it. Praep, ready, sir? Welcome to the virtual stage. Let the people know who you are. >> Yeah, absolutely. So, first of all, uh thanks for having me here today. So my path into GRC was honestly not a sprite line at all. So I started out on the STEM side early on and then moved into commerce and did my masters in finance and landed in IT audit at KPMG almost by accident a decade ago. But looking back uh that accident ended up shaping a lot of my career because of audit was uh my first real entry entry point into the security and risk. So from…