Your CISA, paid in full. Or CRISC, CISM, CGEIT, CDPSE, your pick. Membership, review course, both study manuals, the exam and the application fee.
The whole thing, not a contribution toward it. For anyone in the first early years of GRC, or moving into it from an adjacent role.
Apply yourself, or nominate someone.
Applications close 21 September 2026






If you're in the early years of GRC work, yes. If you're in an adjacent role: IT, security, operations, audit, finance, legal, and moving toward GRC, also yes, even if you haven't started yet. No degree, no minimum grade, no employer involvement. Being between roles doesn't disqualify you.
No, and you never will be. Recipients are under no obligation to use, evaluate, endorse or buy anything we make. Your details won't reach our sales team or any marketing list, and that's in the terms rather than just promised here.
Any ISACA certification: CISA, CRISC, CISM, CGEIT or CDPSE. We cover membership, the online review course, both study manuals, the exam and the application fee, paid directly to ISACA.
If there's a different certification that would genuinely move your career on, tell us in the application and we'll consider it.
No to the first, and only with your permission to the second. We don't ask about your employer's training budget and we won't approach them at any stage. If you're selected and would rather not be named, say so on the form; it has no effect on your chances, and you can change your mind either way later.
Every application is read blind, with names and employers stripped out, and scored by two readers against criteria published on this page before applications opened. A shortlist then goes to a panel that includes a GRC practitioner who doesn't work for Complyance.