So, from the ISC2 website:
To qualify for this cybersecurity certification, you must have:
- At least five years of cumulative, paid, full-time work experience
- In two or more of the eight domains of the (ISC)2 CISSP Common Body of Knowledge (CBK)
Don’t have enough work experience yet? There are two ways you can overcome this obstacle.
You can satisfy one year of required experience with:
Your second option is to take and pass the CISSP exam to earn an Associate of (ISC)2 designation. Then, you’ll have up to six years to earn your required work experience for the CISSP.
Based on this, we can feel reasonably comfortable in setting the lower bound on reach back as six years.
This is not official ISC2 policy on pro-rata for work experience (I haven't looked it up)... but frankly, if you told me you had a roll for five years and six months that was 75% focused on InfoSec(decisions/designs/implementation/planning/audit etc not guns and dogs) and 25% program management I'd be inclined(after asking for your opinion on domain mappings) to say that was an InfoSec role.
Additionally, while I don't know your role so can't comment on specifics, programatic thinking is so important for security, I'd think it would be worth describing that remaining work to your sponsor and seeing if what you were doing didn't map to the following domains in some way:
- Security and Risk Management
- Security Assessment and Testing
- Security Operations
- Software Development Security
Remember you should discuss this with your sponsor, with CV, JD etc and he or she can ask questions. If they are not sure they can ask for assistance/opinion from ISC2. Ultimately I guess they could say, actually that works for three years and the Security+ for one, but then you'd have six years to get the last year in.
Moreover, I think It would be hard to find someone who's whole role was just cybersecurity even if it had that title. Even the Grand Vizier of Securiness probably has to complete their expenses or participate in team building every now and again...
If you want to IM me with specifics I can give you my opinion.
