Transitionin to information security domain

Hi Everyone, I have 11 years of experience in infrastructure process automation, leveraging tools like Ansible for streamlined efficiency. This experience has been further enriched by few years of involvement in PCI DSS compliance. In this role, I ensured infrastructure adhered to security standards, and actively participated in external audits to achieve and maintain certification. I feel like compliance is more to my liking and looking for opportunities to explore transitioning to information security domain as an internal auditor or implementor Would really appreciate any opportunity to connect with people who have successfully transitioned to infosec domain and get some guidance around it .