If you drankin` tonight don`t forget to use UBER for free with the code:
uberFREENEWYEARS
& AAA's "tipsy tow" service is also free .
Call 1-800-222-4357 .
Stay safe ✨
Ya`ll better come get you one of these !
JOB REFERRALSSSS 🥹
I revamped / tested / created a simple system where you can directly request job referrals. If you see a job(s) at one of the listed companies on this platform— secure a referral from someone on the inside:
I went from saying I don`t have any questions at the end of my interview to almost turning into the interviewer 😅
Asking the right questions is key— show your understanding of the role & interest in the company. Ask about the key challenges of the role, how success is measured,
When using ChatGPT for your LI profile, remember it`s a starting point . Always consider the suggestions as a framework to build upon . Tailor the output by adding your personal touch, ensuring each point resonates with your individual experiences & career aspirations .
Here`s
Chat GPT Resume prompts:
Tailor the following resume bullets to match or align to the job qualifications on this [job link + [resume]
Based on this job description for a [JOB TITLE] role at [COMPANY], write a resume for my past [X] years of work experience with 3-5 bullet
If you`re studying for Sec+, here`s a helpful in depth cheat sheet on topics / what to look for in the exam [ ofc use in addition to other study material ]👇🏾
Ya`ll stop sleeping on referrals & being in networking groups & leverage the power of digital networking communities— Slack / Discord / FB Groups etc . These communities can give you access to roles that aren`t advertised on traditional job boards, aka the "hidden job market ."
Linux courses that helped me:
1. [Introduction to Linux (LFS101x) - Linux Foundation]()
2. [Linux for Absolute Beginners - Alison]()
3. [Linux Mastery: Master the Linux Command Line - Tecmint]()
4. [Getting
You`re a Compliance Officer at a tech company about to launch a new software product. Just days before the release, you discover that the software might not fully comply with international data protection regulations—an oversight that could lead to significant fines and damage to
This was my 60 day Linux study plan, ya`ll can tweak [I was on a mission 😅]:
Days 1-10: Introduction to Linux and Basic Concepts
•Days 1-5: Start with “Introduction to Linux – Full Course for Beginners” by freeCodeCamp on YouTube. Focus on understanding the Linux philosophy,
I`m HUGE on effective time management .
So from reading this, I created my own AI prompts to help structure the key points I learned:
- Create a detailed 12-week plan that included specific goals, weekly tactics & daily actions required to achieve these goals: “Create a
When hiring managers read your resume, they`re looking for more than just an overview of your experience. They`re also looking for growth, specifically:
#BlackTechTwitter
#womenintech
👇🏾
It`s great to see a lot of interest in certs, and they`re certainly important in starting a GRC career— certs like CISA, CRISC, and CompTIA Security+ can open doors and provide you with the foundational knowledge needed to understand GRC.
However, I wanna always emphasize that
What are the best certifications to start a GRC Career in Cybersecurity? In this snippet Aria covers some certs that you can get for your career in GRC.
watch and subscribe here:
You`re a Compliance Officer, it`s early Wednesday morning & you receive an alert that sensitive customer data has been accessed without authorization. The alert indicates a potential data breach involving personal / financial info. Your task is to manage this incident, ensuring
In a nutshell ServiceNow & GRC mesh together really well; SNOW`s not just for IT tickets; it has a great GRC module too —
1. You can incorporate all your GRC policies & controls directly into SNOW; manage it all in one place .
2. If there`s a compliance issue, SNOW can
Enhance your LinkedIn job search; use the "Posts" feature [filter accordingly] .
Type in the job titles you're interested in, coupled with keywords like "hiring" or "recruiting” — leads you straight to the source .
It`s who you know but more importantly, who you reach out to .
GRC interview questions, I`ve been asked like 7 of these:
How do you align governance, risk, and compliance frameworks with the organization's business goals?
What methodology do you use to prioritize risks during a risk assessment, and how do you decide which risks to mitigate
Some Job Titles within GRC I use for my clients:
1. Governance, Risk, and Compliance Analyst
2. Risk Management Specialist
3. Compliance Manager
4. Security Compliance Analyst
5. IT Risk Manager
6. Cybersecurity Compliance Officer
7. Information Security Risk Analyst
8.
An IT Risk & Compliance Analyst would typically be involved in the assessment / management of compliance risks associated with the org`s IT systems .
Let`s say you`re an IT Risk & Compliance Analyst at a financial services firm & you`re tasked with overseeing the implementation
When an interviewer asks, "Why do you want to work here ?" they`re gauging your interest in the role & the company [& low-key checking to see if you did your research].
The key to a great response is to be specific & sincere . Mention what excites you about the role, how it
Ya girl is officially the Events Manager for Blacks in Technology, DC 🥳
We have so much in store for you guys 😛
We'll be hosting several different events:
Tech Webinars, Mentor/ Mentee mixers, Networking events, Job Fairs, etc
If you're interested in joining our chapter,
NIST Cybersecurity Framework is a comprehensive set of guidelines and best practices designed to help organizations manage and mitigate cybersecurity risks. It`s divided into 5 core functions:
1. Identify
Focuses on understanding and managing cybersecurity risks to systems,
If you wrapped gifts for Christmas tomorrow, you demonstrated creativity, personal branding, & product design .
You can add these titles to your resume:
1. User Experience (UX) Designer
2. Product Designer
3. Creative Technologist
4. Interface Designer
🤣
So I asked some of my coworkers how they got into GRC:
1. Started as a software engineer working on healthcare projects. Exposure to standards like BS 7799-2 and ISO 17799 sparked interest in the "big picture" beyond just coding. Transitioned by taking courses and
🗣️ ALL MY GRC peeps 👀
I created GRC Career Compass GPT in the CHAT GPT store—
This GPT allows you to have a starting point in navigating the GRC space; expand on skills / development, suggest entry points / career paths, certifications & more 🤞🏾
For example: A “Network Security Analyst” at two different companies:
- American Express, 88k / year
• Actively monitor / respond to security incidents and breaches .
• Perform comprehensive vulnerability assessments and audits .
• Develop and enforce firewall and data
You`re a GRC professional at a mid-sized e-commerce company. The recent spike in cyber threats and unexpected outages has raised concerns about the company`s preparedness to handle disruptions. You`re in charge of developing and implementing a Business Continuity Plan (BCP) to
Deloitte is taking a futuristic approach to protect jobs by using artificial intelligence— instead of cutting staff, they`re reassigning people to where they`re needed, because of AI`s analysis . This strategy could mean more job security & less disruption for employees .
BUT,
In a nutshell ServiceNow & GRC mesh together really well; SNOW`s not just for IT tickets; it has a great GRC module too —
1. You can incorporate all your GRC policies & controls directly into SNOW; manage it all in one place .
2. If there`s a compliance issue, SNOW can
You`re a new GRC professional at a mid-sized fintech company & are tasked with your first major project: assessing and enhancing the org`s GRC structure— the goal is to ensure the company`s practices align with its strategic goals / compliance requirements.
7 steps:
1. Begin by
“Why do you want to work here ?”
I`ve been particularly impressed by how your company [mention a specific initiative or value], which aligns perfectly with my own professional goals. For example, [give a personal reason or a past experience that connects with that initiative].
When I was applying to jobs, I used to only look at companies who made it to “Best Places to Work” . If you`re targeting specific companies & transitioning to a new role, in a specific industry, it`s beneficial to adopt a researcher`s approach—
Here`s a prompt you can use,
#4
:
Efficient & effective work >> working hard
I say this loud & proud, I do NOT work hard ya`ll 😭
Ya girl got a R A I S E w| some added benefits 🤪🥳
& s/o to
@teneikaask_you
for posting 👇🏾
I created a little quick proposal before I had my meeting [we already have pretty
ALLL Tech girlies ( & those aspiring ) 📣📣
We`re having the first ever Brunch Bytes TechSocial BRUNCH Tour ‼️‼️
First stop, DMV 😛 If you in/near/around/upside down the DMV .. please fill out the interest form below 👇🏾
& don`t worry, we hitting a city near all of you soon 🤪
Breaking down governance, risk & compliance— they play distinct but interconnected roles.
Say an org is prepping to launch a new product that involves handling sensitive customer data ..
- Governance sets the STRATEGIC vision for the product launch, ensuring that the initiative
Updated the GRC Career Compass !
Now it includes:
— Interactive learning tools
— Simulated mentorship program
— You can now engage with scenario-based modules
— Take mini-quizzes
— Follow personalized learning paths (with dates to help you stay on track)
— Mentorship advice
—
🗣️ ALL MY GRC peeps 👀
I created GRC Career Compass GPT in the CHAT GPT store—
This GPT allows you to have a starting point in navigating the GRC space; expand on skills / development, suggest entry points / career paths, certifications & more 🤞🏾
#NicheDown
Plenty of specialization areas within GRC—
1. Healthcare:
Focus on ensuring compliance with health-related regulations like HIPAA. This role is vital for protecting patient data within healthcare facilities.
2. Financial Services:
Protect financial data
Implementing a key GRC framework, the NIST Cybersecurity Framework (CSF) —
Let`s say you`re on a GRC team at a mid-sized healthcare provider . Given the sensitive nature of healthcare data / the increasing cyber threats, your org has decided to use the NIST CSF to enhance its
For those who asked —
IT compliance vs IT audit
Compliance = adhering to laws & industry standards, crucial for data protection & ethical practices .
IT audit = evaluates the effectiveness of these compliance measures, focusing on risk management & improving IT controls .
Ex .:
Someone transitioning from sales/customer service to cybersecurity, specifically a Cyber Analyst role:
“Research the backgrounds of top cybersecurity firms like Symantec, Palo Alto Networks, and Check Point . Examine their company culture, market position and the role of
I wanted to share a doc with ya`ll, that shows an account of how I approached / executed a cybersecurity risk assessment for a space system project — a high level the step-by-step process, from identifying and categorizing risks that can enhance your understanding / application
You`re a GRC analyst at a FinTech company &
recently, an internal audit revealed weaknesses in the org`s access control mechanisms, posing significant compliance and security risks.
Here`s how you handle this:
1. Collab with IT and audit teams to assess the specific risks
Within Cloud Security it`s essential to grasp the 'Four C's': Compliance, Configuration, Connectivity & Cybersecurity . Each 'C' represents a layer of security for protecting cloud infrastructure & aligns with the principles of GRC .
Consider a company hosting sensitive data on
If you don`t already know, now is the time to ..
Some valuable resources and learning opportunities to help understand and mitigate issues similar to the recent global outage involving CrowdStrike and Microsoft.
1. Cybersecurity Incident Response and Handling:
- SANS
Agile GRC—a transformative approach that applies the principles of agility to Governance, Risk Management & Compliance; conducting risk assessments iteratively, allowing for real-time updates as new threats emerge instead of waiting for the annual review .
There`s specialized
🔥🔥🔥
My takeaways:
1. Certs like Sec+ are essential in the gov`t tech space because they meet specific standards (e.g., DOD 8570) that qualify individuals for certain roles— but obtaining a cert alone is not enough; networking & actively applying for jobs are crucial for