Transition - Physical to Information

[Jroberts0508]

Hi All,

I have currently been working within Physical Security for the past 12 years. Done ok with my career and climbed the ladder from being an Officer, to having regional accountability.

Recently I have been involved in managing a few projects with access control systems and CCTV - transitioning to IP. Information Security has always peaked my interest and something I have been considering for a while now.

I am on the road to completing the certificate in information security management principles, looking further at Network+ & Security+. The only thing with the transition to which I am asking for some guidance is the starting point, I have read in some places it is essential to start with a job such as IT Support before moving into security, then other places stating its possible to start in Information Security direct.

Just wondering peoples thoughts on this? As trying to obtain a IT Support job is likely to be a massive pay decrease in comparison to my current role, but if this is a must so be it...

I have no experience in a specific IT role, but as mentioned above, have some project management experience within. Any suggestions on other certifications/learning that could help would also be greatly appreciated.

Thank you.

[rslade]

> JKWiniger (Contributor III) posted a new reply in Career on 09-27-2020 07:39 AM

>     I know exactly what you mean about feeling like you need to
> earn your strip, but it seems that it not really the world we live in anymore.

I don't know that it ever was. "Earning your stripes" is still valid, but there are
many ways to earn them. And so many stripes to earn.

> It is a good thing, but so many have little knowledge, think they have way more
> than they do and get get jobs.

Oh, you got that right. But it's sort of equal in terms of those who are new to the
field and don't yet know what they don't know, and those who have been long in
the job, but have never learned what's really necessary. (When teaching the
review seminars, I used to tell the candidates that the exam was intended to find
out if they actually had five years worth of experience in the field, and not just
one year five times over.)

> Having come up doing so much
> has actually hinder me. I can do so many things in so many areas I struggle with
> figuring out what I want to be doing next.

Yeah, I know that one, too. You get to be a generalist, and can see the whole
field, which should be what is desired. But, these days, everybody seems to want
single-focus specialists. Who miss things.

>   Here is something I have been realizing, I can see the big
> picture, how different systems interact with each other, how seemingly unrelated
> items actually tie in and effect each other, and it's because I earned my strip
> and have been in so many areas that I can do this. I also see things that others
> don't.

You also start to learn what's important versus what is just the "latest thing."

> With
> lower level positions people with only know a small part of the bigger picture
> that they need to do their jobs because that's all they need to know.

And, to address something else James raised, you can manage those people even if
you don't know all th details of what they are doing. I've had two jobs managing
development teams. I've never been a professional programmer myself. The fact
the I do know how to program is handy in understanding some of the problems,
but I don't even need to know what language they are using. They know how to
code: I know what needs to be done. (Also, I know how to manage people, which
I learned very, very early on, and which lots of people in management never *do*
learn ...)

====================== (quote inserted randomly by Pegasus Mailer)
rslade@gmail.com rmslade@outlook.com rslade@computercrime.org
To gild refined gold, to paint the lily,
To throw a perfume on the violet,
To smooth the ice, or add another hue
Unto the rainbow, or with taper-light
To seek the beauteous eye of heaven to garnish,
Is wasteful and ridiculous excess.
`King John,' Act IV, scene ii, William Shakespeare
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://community.isc2.org/t5/forums/recentpostspage/user-id/1324864413

[rslade]

> Jroberts0508 (Viewer) posted a new reply in Career on 09-27-2020 01:05 PM in the

> Seen it may times before and I am realistic/honest about my capabilities when
> interviewing - probably works against me!

As a veteran of many decades of job interviews, and not a few bad jobs, I have
learned one thing: if the company is such that you have to do tricks to get the job,
that is not a company you want to work for. Be honest. If they don't pick you,
you don't want to work for those idiots. Trust me.

====================== (quote inserted randomly by Pegasus Mailer)
rslade@gmail.com rmslade@outlook.com rslade@computercrime.org
Your email has been returned due to insufficient voltage.
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://community.isc2.org/t5/forums/recentpostspage/user-id/1324864413