GRC Specialist Programme

What you will be able to do

• Design a governance model and a current-and-target profile, and write the board paper that funds it.
• Put a cyber risk in money with Open FAIR and a Monte Carlo model, and defend the range.
• Run one control set across ISO 27001, NIST, SOC 2, PCI DSS and the regulators of the UK, EU and US.
• Lead an audit, from the plan and the sample to graded findings and the report.
• Run a consulting engagement: scope, proposal, gap assessment, roadmap and the client presentation.
• Automate evidence in Azure, Microsoft 365 and AWS, and build a control dashboard.

The curriculum – 6 modules, 16 classes

1. 01Governance & Strategy

   Designing governance with NIST CSF 2.0, COBIT 2019, ISO/IEC 27014 and the UK Cyber Governance Code of Practice; building or rescuing an ISMS across countries; risk appetite, business cases, roadmaps and the board paper.

2. 02Quantified & Emerging Risk

   From heat map to money with Open FAIR and a Monte Carlo model in Excel; AI governance with ISO/IEC 42001, the NIST AI RMF and the EU AI Act; cloud and supplier concentration risk.

3. 03Frameworks & Regulation

   One control set for ISO 27001, NIST CSF 2.0 and SP 800-53, SOC 2, PCI DSS v4.0.1, CIS Controls and NCSC CAF; regulated sectors in the UK, EU, US, the Gulf and Asia-Pacific; SOC 2 readiness, questionnaires and trust centres.

4. 04Audit & Consulting

   Leading audits with ISO 19011 and ISO/IEC 27007, sampling and grading findings; a consulting engagement from proposal and gap assessment to the report and the client-board presentation.

5. 05GRC Engineering

   Compliance as code: controls as testable checks, continuous control monitoring, OSCAL and policy as code; evidence automated in Azure, Microsoft 365 and AWS; a control dashboard built with PowerShell or Python.

6. 06Capstone

   Your route, presented to a panel: a gap assessment, roadmap and board paper (consultant), or an evidence pipeline and dashboard (engineer).

Every module, class by class, on the programme page

What is included

• Live, tutor-led teaching
• Every session recorded
• Working files you keep
• Hands-on practice
• Assignments marked by your tutor
• CV rewrite and LinkedIn optimisation
• Mock interviews
• Job feed while you are registered
• Verifiable certification badge
• Support after you are placed

What is not included

• Third-party certification exam fees, such as ISO/IEC 27001 Lead Implementer or Lead Auditor, BCS CISMP, CISM or CRISC.
• Copies of the ISO standards themselves, which ISO sells – the classes teach them, and show you where to read them.
• Your own computer, Microsoft Excel and Word (or a free equivalent) and an internet connection.

Certification

To earn the MCW Certified GRC Specialist badge you attend at least 80% of classes and pass every assignment and the capstone, each handed in by the final class. Everyone who completes the classes also receives a Certificate of Course Completion, which confirms the programme and the hours you attended. The badge is MyCyberWay’s own verifiable credential. It is not a regulated or accredited qualification, and it is not an ISO, ISACA, ISC2 or BCS certification.

Paying

The price here is the full programme fee, paid in full at checkout. To spread the cost, choose PayPal at checkout: PayPal may offer Pay Later, subject to its own checks.

What happens after you buy

1. You get an order confirmation by emailStraight away.
2. We agree your start date and scheduleClasses run twice a week, arranged around your job.
3. Your learning portal opensSign in with your MyCyberWay account. Once you are in your batch, your classes, Teams links, recordings, labs and quizzes are all in the learning portal.
4. Your tutor sends the primer and your filesA short primer and the working files for module one reach you before your first class.

We do not guarantee employment, a particular salary, or a pass in any third-party exam. Outcomes depend on your own effort, your background and the job market – what we can promise is the teaching, the feedback and the support described above.