For someone working in roles like internal audit/compliance with around 3-4 YOE, is it feasible/worthwhile to try to move to a more quantitative risk management role such as credit / liquidity / market risk?

Not sure if there is a meaningful difference in salary range as well, especially given that these types of risk management roles seem to be much more technical / quantitative (and hence likely harder to land as well). Any general insights on risk management as a career path is much appreciated!