u/Head-Implement8324

I’m about to start a role in Technology Risk & Compliance at a bank, but in the long term I’m more interested in moving into technical cybersecurity (application security, cloud security, security engineering, etc.).

How realistic is this transition internally or externally? Do companies actually hire people from tech risk/compliance backgrounds into more technical cyber roles?

I have a software/engineering background and I’m planning to keep improving my technical skills alongside the job.

Would love to hear from people who made a similar transition or worked with others who did.