GRC Analyst Professional
Live Workshop

What You Will Be Able to Do

By the end of this 10-session live workshop, you will have the skills and hands-on experience to:

✅ Apply governance frameworks in practice — structure board-level decision-making, accountability models, and enterprise governance policies aligned to ISO 38500 and COBIT

✅ Conduct enterprise risk assessments — identify, analyse, and treat risks using ISO 31000 and NIST RMF with heat maps, risk registers, and treatment plans

✅ Design and implement compliance programmes — map regulatory requirements, build control frameworks, and create monitoring and reporting mechanisms that satisfy auditors

✅ Build and evaluate internal control systems — design controls, test their effectiveness, and remediate gaps across financial, operational, and IT domains

✅ Conduct GRC audits end-to-end — plan, execute, report, and follow up on internal audits using modern audit techniques and technology-assisted methods

✅ Manage cybersecurity risk within a GRC context — integrate ISO 27001, NIST CSF, and cyber risk into the enterprise risk management programme

✅ Navigate key regulatory frameworks — understand GDPR, SOX, PCI-DSS, and sector-specific requirements and translate them into actionable compliance controls

✅ Complete a capstone project — a real, portfolio-ready GRC programme deliverable you can showcase in interviews for GRC analyst and compliance roles

Why GRC — and Why Now?

Governance, Risk & Compliance has become one of the fastest-growing specialisms in cybersecurity and enterprise risk management. Organisations of every size are under mounting pressure to demonstrate compliance with GDPR, ISO 27001, SOX, PCI-DSS, and sector-specific regulations — while simultaneously managing cyber risk, internal audit, and board-level reporting.

Yet most professionals stepping into GRC roles are thrown in with little structured guidance. This live workshop changes that. Over 10 weekend sessions, you will build the practical skills, frameworks, and confidence to operate as a competent GRC analyst from day one.

Who Is This Workshop For?

✅ IT and security professionals looking to transition into a GRC, risk, or compliance role

✅ Compliance officers and auditors who want to deepen their technical GRC knowledge

✅ Risk managers seeking a structured framework aligned to ISO 31000, NIST RMF, and enterprise practice

✅ Recent graduates and career changers targeting GRC analyst, information security analyst, or internal audit roles

✅ Security engineers and analysts who need to understand the governance and compliance layer of their organisation

✅ Anyone pursuing CISA, CRISC, ISO 27001 Lead Implementer, or CGRC certifications who wants practical grounding before the exam

Prerequisites

No prior GRC experience is required. You should have a basic understanding of IT concepts and some exposure to a business or security environment. If you have worked in IT support, networking, or cybersecurity in any capacity, you are ready for this workshop.

10-Session Live Curriculum

Each session runs on a weekend morning (5 AM EST) and combines instructor-led teaching with hands-on exercises, framework application, and live Q&A. Recordings are included with all enrolments.

Session 1 — GRC Foundations: Frameworks, Roles & the Regulatory Landscape

Understand what GRC means in practice, how governance, risk, and compliance interact, and the key frameworks (ISO 31000, COBIT, NIST RMF, ISO 27001) that drive enterprise programmes. Map the regulatory environment relevant to your sector.

Session 2 — Enterprise Governance: Structures, Policies & Board Accountability

Design governance structures that create clear accountability. Build policy hierarchies, define roles and responsibilities, and understand how governance frameworks align to ISO 38500 and corporate governance expectations.

Session 3 — Risk Management: Identification, Assessment & Treatment

Run a structured enterprise risk assessment using ISO 31000 and NIST RMF. Build risk registers, calculate risk scores, create heat maps, and develop treatment plans with residual risk tracking.

Session 4 — Internal Controls: Design, Testing & Remediation

Design preventive, detective, and corrective controls across IT, financial, and operational domains. Test control effectiveness and document remediation plans for identified gaps.

Session 5 — Compliance Programme Design: Requirements Mapping & Control Frameworks

Translate regulatory requirements (GDPR, SOX, PCI-DSS) into actionable control frameworks. Build compliance monitoring programmes, define KRIs, and create reporting mechanisms that satisfy both auditors and management.

Session 6 — Cybersecurity Risk & GRC: ISO 27001, NIST CSF & Cyber Risk Integration

Integrate cybersecurity risk into the enterprise risk management programme. Apply ISO 27001 controls selection, NIST CSF maturity assessments, and cyber risk quantification techniques within a broader GRC context.

Session 7 — GRC Audit: Planning, Execution & Reporting

Plan and execute an internal GRC audit from risk-based scope definition through fieldwork, evidence collection, finding classification, and formal audit report writing. Cover follow-up and continuous monitoring best practices.

Session 8 — Navigating Key Regulations: GDPR, SOX, PCI-DSS & Sector Frameworks

Deep-dive into the most commonly encountered regulatory frameworks. Understand obligations, translate requirements into compliance controls, and manage cross-jurisdictional complexity including data protection impact assessments and breach notification.

Session 9 — GRC Tooling, Automation & Reporting Dashboards

Survey the GRC technology landscape — from spreadsheet-based approaches to enterprise platforms (ServiceNow, Archer, OneTrust). Build practical dashboards for risk, compliance status, and audit findings. Automate recurring compliance checks.

Session 10 — Capstone Project + Career Lab

Build a complete, portfolio-ready GRC programme for a simulated organisation: governance policy, risk register, compliance control mapping, and audit findings report. Includes CV review, LinkedIn optimisation, and interview preparation for GRC analyst and compliance roles.

📩 Need Help or Have Questions?

We’re here to support you on your cybersecurity journey.
For any inquiries, feel free to reach out to us:

📧 Email: infosec4tc@infosec4tc.com
💬 WhatsApp: +971 52 511 5498

Your success is our mission — don’t hesitate to get in touch!