Combining Cybersecurity GRC with Law?

Hi! I'm a cybersecurity GRC manager in financial services. A lot of what I do is legal-adjacent (governance, risk management, regulatory compliance, data privacy, legal holds, investigations, M&A due diligence). I love what I do.

I took a couple of introductory courses for contracts & corporate law and found them fascinating. I have no interest in litigation, but have been toying with the idea of getting a JD as it could be a great strategic career move for me in the future (with an eye towards director & board roles). The second reason is that I'm interested in law as a potential pivot for a third career in the future, nearer to retirement.

I'm 35 working full time with a 4yo, so it would absolutely have to be flex/async/part-time, fully online program.

I was hoping to get feedback. I know MLS options exist but I get the feeling it's not as worth it. This is a personal goal for me more than a direct requirement of my role, but it is something that I have been considering for a year now.

Thanks for any input!