Six GRC tracks. Pick the one that fits your next role.

Every track is live, practitioner-led and paired with career coaching. Not sure where to start? Book a free call and we will recommend one.

Policies, control frameworks, risk registers and audit readiness: the core skill set every GRC analyst is hired for.

Vendor tiering, SIG questionnaires, SOC report reviews and continuous monitoring across the full vendor lifecycle.

ISMS scoping, the 93 Annex A controls, the Statement of Applicability and internal audit readiness.

Quantify cyber risk in financial terms with FAIR, set risk appetite and brief executives on what to fund.

GDPR and CCPA/CPRA in practice: DPIAs, records of processing, data subject requests and cross-border transfers.

ISO/IEC 42001, the EU AI Act and NIST AI RMF, plus hands-on auditing of generative AI applications.

Compare the tracks

Level, core frameworks and the first role each track targets, side by side.

Track	Level	Core frameworks	Typical first role
GRC	Beginner friendly	NIST CSF, SOC 2 Type II, COBIT	Junior GRC Analyst
TPRM	Beginner to intermediate	SIG / SIG Lite, NIST SP 800-161, ISO 27036	TPRM / Vendor Risk Analyst
ISO 27001	Beginner to intermediate	ISO/IEC 27001:2022, ISO 27002, ISO 27005	ISO 27001 Lead Implementer
Risk Management	Intermediate	NIST RMF, COSO ERM, FAIR Methodology	Cybersecurity Risk Analyst
Data Privacy	Beginner friendly	GDPR (EU/UK), CCPA / CPRA, ISO 27701	Data Privacy Analyst
AI Governance	Intermediate	ISO/IEC 42001, NIST AI RMF 1.0, EU AI Act	AI Governance Analyst / Lead

The Nexus plan includes all six tracks across 35 hours of live training, plus 1-on-1 executive coaching.

Book a free call See plans