I'm Chuka Okeke, residing in western Canada. I passed my CC exam last year and received training in the GRC domain of cybersecurity. I possess in-depth expertise in ISMS frameworks and security standards. I played a key role in formulating the information security policy currently implemented in my current job. Despite my passion for the field, the job market is exceptionally competitive, and employers seem reluctant to provide the growth opportunities I seek. It's disheartening, considering the overarching goal of this project was to encourage more individuals to enter the field. Is there any lead as to how I will get a job in the mainstream information security field? I have sought assistance on LinkedIn, but looks like nobody wants to help. I am willing to be adopted by anyone who will guide me to grow in the field. I have a burning passion for it. @CityofCalgary @SecAnalyst Hackers attack Canada Revenue site @InfoSec
@Katzlaw wrote:Is there any lead as to how I will get a job in the mainstream information security field?
This a broader question than you might realize. It's not just how do we qualify people for working in information security, but it also raises the question of what is the future of information security.
Practical tip: Network, go to meetings of local information security groups, chapters, etc. Be sure you are experienced with specific software/tools. If someone is looking for Okta experience, you need to say that (not I've done identity and access management). Be a good communicator. Again, this is part of networking, but when I was hiring, it always went through my mind "can I send this person to a meeting?" When it comes down to it, a lot of our job is about convincing people - either to change habits, not deploy a system, revise some code, spend money. You have to be a good communicator. Lastly, be patient, job offers are like bananas; they come in bunches, it seems.
As to the CC, I recently retired, so I am not sure I have enough experience with the it to say where it lands in terms of opening doors. I would focus more on selling your experience than your certs though.
@Early_Adopter wrote:
When you network it’s important to be charming, have a plan but also don’t look like a project with no end full of unrealistic expectations about what sort of job/salary/role/progression you’d like.
This is really good advice, and it speaks to a lot of pitfalls that can ensnare young first-time job seekers. Even if you are looking for a mentor, bring something to the table.
In a bigger picture, I've often referred to myself as a "data plumber." Our job is to bring potable data from one place to another, ensure, the waste goes somewhere else, with no leaks or infiltration. To a plumber, these are not separate "hydrosecurity" tasks; they are things integral to plumbing.
Perhaps things might look different if the plumbers union started hiring marketers to recruit people with no trade experience or apprenticeship. The union, which had, say, 100,000 licensed plumbers, might suddenly swell to 1 million, with 90 percent of them "certified in hydrosecurity" (but no license or experience). At some point that 90 percent might realize that despite their union dues, it's can be hard to get a job with nothing else on their resume. Plus, with 900,000 of them, do they really distinguish themselves from each other anyway?
As is, maybe even licensed plumbers are finding themselves in jobs where all they do is stand in a basement 60 hours a week, turning a valve on or off because the automated one was never built right. Others might stand there holding a finger on a pipe to cover a leak. And so a good percent of them quit every year, and it gives the perception of a "plumber gap." The problem isn't the need for more plumbers. It's just the need for better plumbing. But even the plumbers' union misses this point. So the future of plumbing seems to be having enough people who are willing to stand in a basement for 8-12 hours a day, on-call, putting a finger on leaky pipes.
For those of who understand the better solution is to use pipe sealant, torque wrenches, and quality control, their voices are shrinking as the union continues to grow, and more people only know the solution of sticking a finger on the pipe. Maybe for those who can afford it, they can purchase DaaS (Ducttape as a Service).
As someone who gave CC and CISSP exams and passed, to me, CC was a stepping stone to pass CISSP. I don't think CC by itself will give you a job even an entry level one. Since you are in cybersecurity already, my suggestion would be to search for security jobs within your org first. I have been searching for product manager jobs in cybersecurity domain and so far I have not been successful within or outside my org but I have not lost hope 🙂
Hi Chuka,
I've got the Sec+ cert and will finish the Google Cyber cert this spring. I am taking the CC cert this summer and I'm hoping to have enough certs to get in the industry. Even if you have help desk experience, it's hard getting in. Keep grindin', tho!