Health professional transitioning into GRC and pen testing