From security audits to privacy consulting: Building a GRC practice Will Sweeney

Get your FREE Cybersecurity Salary Guide: Will Sweeney, founding and managing partner of Zaviant, joins the Cyber Work Podcast to discuss the evolving landscape of data privacy and GRC (governance, risk and compliance). With experience overseeing complex information security audits for Fortune 100 companies, Will shares insights on everything from the key differences between security auditing and implementation to whether privacy regulatory frameworks will continue multiplying or begin consolidating. He offers practical advice for GRC aspirants, emphasizing the importance of understanding core security processes rather than getting lost in framework structures. Will also discusses the challenges of starting a consultancy practice and provides valuable career guidance for those looking to transition into the data privacy and compliance space. 0:00 - Intro 1:15 - Cybersecurity Salary Guide promo 2:30 - Will Sweeney and his early tech background 6:45 - Building his first high school website 9:20 - Career pivot from IT to data privacy and GRC 12:15 - Audit vs. implementation: Understanding the difference 16:30 - Starting Zaviant and the GDPR opportunity 20:45 - Current challenges in data privacy compliance 24:10 - Common security gaps companies overlook 28:30 - Breaking into GRC: Skills and career advice 32:45 - Starting a consultancy: Hidden challenges 36:20 - The future of privacy regulations and AI impact 40:15 - Career advice for help desk professionals 41:30 - Closing thoughts View Cyber Work Podcast transcripts and additional episodes: About Infosec Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.

You can listen to From security audits to privacy consulting: Building a GRC practice Will Sweeney online on Radio and Podcast. Open the player on this page to stream the available audio.

From security audits to privacy consulting: Building a GRC practice Will Sweeney is an episode from Cyber Work by Infosec.

This episode is 42:20 long.

This episode was published on Jul 21, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Cyber Work when more episodes are available from the podcast feed.