Brushing up one's own infosec "chops"

[ericgeater]

I know it's common to see many people who obtain a cert, then expect to be rewarded with a job in cybersecurity.  For a moment, let's presume those people are already employed somewhere.  What advice would you provide to a person on making good use of their new knowledge, in the job they currently have?

We already know many businesses have little to no awareness of their security posture -- or even what a security posture is!  So, leveraging ITIL's "Start Where You Are" principle, how would you culture a new CC to create improvements in their current role?

[BNspired2Do]

Very good question.  My current role is IT, but not a "Cyber" role, however I study on my own for a variety of Subjects that pertain to Cyber Roles.  

Namely:  Using training resources with Hands-On simulation models for:  SEIM & SOAR, Python tutorials (automation), Virtual Servers, Backup of these, SCCM automate... This helps me stay focused on goals. My current certs - Security+ & CC ISC2.