What's the best use of my time?

I just finished a bachelor's in Security Studies (NL, 3 years, 180 ECTS) and want to get into cybersecurity. I'm planning on starting a Cybersecurity Governance master's in September.

However, I want to get into cybersecurity after my master's. An internship is out of the question (self-funded study), so I was thinking of getting the Google Cybersecurity Certificate through Coursera and then an ISO 27001 foundations certificate by the time i'm done. I have a lot of time on my hands this summer. I was thinking of maybe doing small side-quests, such as: setting up a home lab, familiarizing myself with GRC software, etc. I want to explore and do as much as possible by the time I finish the master's so I can justify "some" work experience.

I was wondering whether anyone working in the field for a while (GRC, Information/Risk Management, etc) has any other suggestions?