Frameworks and standards
How ISO 27001, NIST CSF, NIS2 and GDPR apply to a real organisation.
Cohort-based training for career changers. The frameworks, the real work, and the part most courses skip: how to get hired.
Built for people coming from HR, finance, operations, teaching and similar fields.


ISO 27001, NIST, NIS2 and GDPR, applied to real work, not just memorised.
Interview language, risk conversations and control-testing walkthroughs.
Regular live sessions with an enterprise security architect.
Turn your current experience into a GRC story a hiring manager believes.
How ISO 27001, NIST CSF, NIS2 and GDPR apply to a real organisation.
Identify, rate and treat risk. Build and explain a risk register.
Test a control the way an auditor would, and document it.
Explain risk to managers and boards in plain language.
Target the right roles, build a portfolio, and get in front of the people who hire.
Every module applies to Stark, one case company you work on from start to finish. By the end, you have real GRC work you can walk an interviewer through.
Raji Mavrik is an Enterprise Security Architect working on ISO 27001, NIS2, Zero Trust and AI security programmes for enterprise clients. He built GRC Sage to teach what gets people hired, not just what's on the exam.
Live group sessions run throughout each cohort, with recordings for members.
Rewrite your experience in the language GRC hiring managers look for.
Practice interviews with feedback on risk and control questions.
Build proof of your work and a method for reaching the people who hire.
Available on top of the core programme.
Private sessions focused on your background, your target roles and your interviews.
Help running a structured job search, with every application reviewed and approved by you.
Ask about add-ons on a call. Book a call
Take the free 20-question GRC Career Readiness Scorecard and get a report showing where to start.