KPMG · Chicago, IL
Compensation
Plain English
You review policies, check systems, and write reports. The least technical path into cybersecurity.
Conduct compliance assessments against SOC 2, ISO 27001, HIPAA, and PCI DSS. Prepare evidence packages and work directly with clients to close control gaps before certification.
Most people finish in 10–18 weeks from zero.
Want the full GRC career guide?
Salary data, day-in-life, personality match, full roadmap.