I'm generally not a big fan of security certs, especially for mid career or later (and a lot of people I know got involved well before certificates were a thing; they might have gotten certificates early on had they entered the industry later). However, DOD (8570/8140), some specific regulations, and some specific clients sometimes require them. I also dropped out of both high school and MIT undergraduate so having at least some cert is sometimes helpful for forms.

Assuming you have the experience and a reasonable level of knowledge, CISA and CISM are pretty easy to maintain. CISSP is arguably worth it too but I let mine lapse due to annoying renewal requirements and some politics in the org.

Having one or more of these can be really handy -- sometimes you have a client who requires it (perhaps because they've copied someone else's requirements), sometimes there is a project you're tangentially aware of with an audit requirement, etc.

Technically they're nothing special. The Offensive Security stuff is probably the best for technical knowledge in their domain.

(I also do a bunch of med, shooting, driving, armorer, etc. classes; it's especially interesting seeing how adult education/instructional design/etc. work in those areas, independent of the actual subject areas taught. "Training" vs. "education" in a lot of cases, etc.)