enterprisesecuritymag

JULY 2022ENTERPRISE SECURITY| | 9to reflect that market demand. Use that input to define an adapted compensation model for cybersecurity professionals, offering the possibility of choice between a technical or a management path, without penalizing the first, making it clear and transparent in terms of career progression opportunities.Investing in training and participation in events/conferences for your team is another great way to motivate and retain talent, while continuously developing their potential and skills. New ideas, experiences, references and knowledge are acquired and will then be put at the company service, positively influencing and contributing to the cyber roadmap.Involve your team in the design and definition of your roadmap for the next 3 to 5 years, promoting transparency, sense of ownership and meaning, enabling team members to have visibility on how they will be able to contribute, as well as on the challenges/opportunities ahead. Automate/Orchestrate Tedious and Repetitive TasksHighly skilled professionals must be relieved from low value recurring tasks that can be automated/orchestrated, maximizing their focus on specialized activities that will benefit from their knowledge and experience, keeping work interesting and challenging. This can be achieved in different forms, by using technology solutions to improve and boost operational efficiency, like Security Orchestration, Automation, and Response (SOAR), structuring and creating workflows for approval and validation with pre-accepted policies, like Network Security Policy Management (NSPM).Lighten Your Requirements and ReskillIt's often part of cybersecurity job opportunities the need to have several years of experience in the area, as well as University degree on cyber, significantly limiting the matching candidates. You might want to consider lightening those requirements and rather focus on willingness to learn, capability and interest to adapt, and critical thinking. Some of the most talented professionals I've met in the cyber domain do not have a bachelor, master or doctorate in cyber or even IT, thus they would not match the hiring criteria, which would be a great loss for organizations.Look inside your organization and identify people interested in the cyber area, without the need to have previous knowledge, and give them the chance to reskill and enter this domain. You might be surprised with the outcome. If you are looking for an Industrial Cyber Security Expert, why not reskilling an operational technology professional, who has knowledge on what you are trying to protect? If you are looking for a Web Application Security Tester, why not reskilling a software developer? If you are looking for a Cybersecurity Architect, why not reskilling an IT Architect?Take advantage of recruitment changes observed in result of the pandemic crisis, including the global adoption of remote and flexible work and greater openness to relocation, by removing location as a deciding factor. You'll get a much wider pool of candidates by not limiting it to the company's location, possibly exploring employment markets on foreign countries and attracting talented people with enriching mindset and cultural background.Contribute to the Cyber CommunityBe open to collaboration with academia and consider onboarding internships and trainees within your team. There are amazing young talents that bring such a refreshing approach, unlimited energy and commitment which can positively impact the team spirit and productivity, and all they need is an opportunity and some guidance to thrive. Even if they leave afterwards, you'll be contributing to enlarge the Cybersecurity community and help solve the industry skill shortage. Approach time spent as an investment rather than a loss of your time.Be Prepared and Embrace Leavers NaturallyThe day will come when our team members decide to move on, taking new challenges and accepting to explore new opportunities elsewhere. We must embrace this as something natural and focus on the positive aspects, considering that a new opportunity might be arising for a new or existing team member to relocate to that position and take new responsibilities, continuing its growth path. As people managers, our goal is to take the best out of each of our people and support them in their journey, thus their success and evolution can only be seen as a source of pride and a sense of accomplishment. ESInvesting in training and participation in events/conferences for your team is another great way to motivate and retain talent, while continuously developing their potential and skills
< Page 8 | Page 10 >