The lights are on but nobodys in! - Penetration Tester IT Governance Employee Review

Learned a lot. The job was interesting.

Disconnect between the US and UK. Senior management understood the business of cybersecurity. But they did not understand business management.

While the role was fully remote, this was undermined by negative communication through internal messaging tools. Overall, I would not recommend IT Governance / GRC Solutions to anyone seeking a supportive, well-structured workplace or long-term career development.

Working at IT Governance / GRC Solutions was a frustrating experience overall. While the company presents itself externally as a professional cyber security organisation, the internal reality did not reflect this. I worked in Marketing, and from summer 2025 there was a lack of clear direction from the CMO. Expectations and priorities changed frequently, making it difficult to do the role effectively or feel confident in performance. Feedback often felt reactive rather than constructive, and there was a persistent sense of blame rather than support, which created ongoing anxiety about job security. Communication from senior leadership lacked transparency. Decisions were often attributed to external ownership without meaningful explanation, leaving teams unclear on strategy or long-term goals. Workloads were consistently unrealistic, with tight deadlines and minimal support. Burnout appeared common, yet concerns raised by staff were rarely addressed in a meaningful way. There were no clear career development opportunities, and progression felt limited unless you were already favoured by management. The culture within Marketing felt particularly difficult. Management style relied heavily on criticism and pressure, which contributed to a toxic environment, low morale, and unnecessary stress. Positive recognition was rare, while criticism was frequent and often poorly delivered.