I’m looking for some honest advice from people already working in cybersecurity or who’ve made a similar switch.

I have a bachelor’s degree in accounting and finance and about 4 years of professional experience in industry accounting. Over time, I’ve realized that I’m way more interested in systems, controls, and the security side of things than in continuing down the traditional accounting path. I’ve worked with ERP systems, automated reporting with VBA, and handled audits, which gave me a taste of how vulnerable financial systems can be. That’s what got me curious about cybersecurity.

At this point, I’m seriously considering going back to school to earn an online Master’s in Cybersecurity. I’ve looked at programs like Georgia Tech, Johns Hopkins, and Kennesaw State. But before I make that kind of time and financial investment, I wanted to hear from people who’ve already been there.

Questions:

• Would a master’s in cybersecurity be a smart move coming from my background?

• Is it overkill if I don’t have any IT or CS background?

• Should I be focusing more on certifications (e.g., Security+, CySA+, etc.) or bootcamps instead?

• Realistically, what kind of cyber roles could someone like me land post-degree or post-cert?

I’m most interested in roles like GRC, risk analysis, or even technical analyst work once I get more experience. Any guidance would be seriously appreciated... especially from folks who’ve transitioned from non-tech backgrounds.