I have been working in to information security since last couple of years and switching between GRC, Arch- AppSec roles.