| | MAY 2024ENTERPRISE SECURITY8IN MY OPINIONIN MY OPINIONEXPANDING HORIZONS: SENIOR LEADERSHIP AND CYBERSECURITY TALENTEddie Williams, Senior Director, Information Security, Governance, Risk, and Compliance - IT Security, Versant HealthROLE OF SENIOR LEADERSHIP IN CHAMPIONING THE RECRUITMENT AND DEVELOPMENT OF CYBERSECURITY TALENT FROM NON-TRADITIONAL SOURCESSenior leadership is the foundation. Their understanding of organizational security and business needs is the basis of recruitment and development of cybersecurity talent from whatever sources. Getting buy-in and championships from senior leadership drives the organization to recognize that its cybersecurity talent openings can be filled from a variety of sources other than traditional universities and standard career paths. Senior leadership, as the landscape changes, should be informed of the current state and given the informational resources on where to find the best cybersecurity talent, and it falls to their advisors to bring the news of untapped sources from which to draw much-needed talent for usually a much better ROI. STRATEGIES IMPLEMENTED TO ATTRACT NEW CYBERSECURITY TALENT FROM NON-TRADITIONAL SOURCESGet leadership buy-in to establish a strong internal program for DEI and to include non-traditional backgrounds for cybersecurity talent. Break the numbers down by talent to help them see the immense ROI and retention to galvanize them to action and lean into the search. After that, put together attractive pay, retention and training packages. Although the fiscal investment will normally be a bit lower initially, make the organization attractive to those who would come in by offering a chance to learn, grow and shape themselves to your organization, which also increases retention numbers. Reach out to networks, social media and government organizations to get more informed. Some of the leaders in more traditional pathways or non-traditional places can help you reach out to those who just need a chance to be seen and heard to boost your cybersecurity talent pool. Work with an established apprenticeship training and placement organization. I am board vice president for a non-profit cybersecurity apprentice training and placement organization. An organization dedicated to just that will help find, attract, train and place talent. Low-cost packaged process.ADVANTAGES OF LOOKING FOR CYBERSECURITY TALENT IN PLACES OTHER THAN THE USUAL CHANNELSDiamonds Aren't Mined from the Surface: The unique perspectives that will drive innovation in cybersecurity are going to come from organizations finding those that are not bound by traditional ideologies. Do the legwork to find them. Shift the Paradigm to Drive Innovation and Growth: The paradigm of university students is a strong one and drives a lot of the stability and thought leadership in cybersecurity these days. They have set a standard and created a paradigm, which is not a bad thing. That paradigm, however, stagnates without fresh and, more importantly, a variegated influx of talent. That variegated talent is best sourced from non-traditional sources like apprenticeship, military, and civilian retraining programs. Great ROI: The ROI is that the traditional initial investment is usually lower, especially when working with an apprenticeship program. Less spent in training for basic certs. Non-traditional cybersecurity entrants are also usually already specialized or specializing at a high level in the major technologies and jumping right in. You Get Multiple Skillsets for the Price of One: Again, non-traditional candidates tend to think outside of the box and bring myriad hard and soft skill sets from other industries that help move any cybersecurity strategy forward for an organization. I've personally run across apprentices with backgrounds in teaching (ability to design a cybersecurity training and awareness program from scratch), law (keen eye for understanding and applying cyber regulations to their organization) and many others. Non-traditional Candidates are Flexible. Finally, the organization can mold them into what is needed more easily. There is not a lot to unlearn. Eddie Williams
< Page 7 | Page 9 >