In a recent webinar hosted by IT Governance, Andy Johnston (divisional director for training), Nikolai Nikolaev (information security specialist) and Soji Obunjobi (cyber security specialist) shared valuable insights into navigating a career in cyber security, with particular focus on the qualifications and experience needed for management and specialist roles.
This blog summarises key takeaways from the webinar, providing guidance on career pathways, essential certifications and the skills required to advance in the cyber security field.
You might also be interested in our blog How to Start Your Career in Data Protection and Privacy.
The growing demand for cyber security professionals
The webinar highlighted a significant global challenge: the demand for skilled cyber security professionals is outpacing supply.
According to the presenters, approximately 60% of cyber security teams are currently understaffed, while 80% of organisations anticipate an increasing demand for technical cyber security specialists in the coming year.
It is a great time to develop your career. The cyber skills gap is growing, and there are plenty of roles absolutely in this industry.
This shortage creates tremendous opportunities for professionals looking to enter or advance in the field. Organisations are increasingly willing to invest in employee development, making it an opportune time to pursue cyber security qualifications.
Most in-demand technical skills
When discussing the most sought-after skills in cyber security, the panel identified several key technical areas employers are prioritising:
- Identity and access management
Controlling who can access systems and data; implementing authentication and authorisation systems. - Cloud computing security
Securing Cloud-based platforms and services; understanding cloud security architecture. - Data protection
Implementing controls to secure sensitive data; ensuring compliance with data privacy regulations. - Incident response
Identifying, managing, and remediating security incidents; developing response protocols. - DevOps security
Integrating security into development pipelines; securing containerization and CI/CD processes.
The panel highlighted identity and access management as an excellent starting point for those new to cyber security, noting that it serves as “the first line of defence” and is fundamental to most security frameworks:
Identity and access management has always been considered a first line of defence… I’ve seen a lot of organisations looking for identity and access management architects – people who can manage privilege access, design identity and access management even for Cloud environments.
Cloud computing was also emphasised as a growth area, with Nikolai noting that “in the future, probably Cloud computing will take slightly over [in importance] because most technology will be in the Cloud.”
Essential soft skills
Beyond technical expertise, the webinar stressed the importance of soft skills for cyber security professionals. These transferable skills are equally crucial for career advancement:
- Communication
Theability to explain complex security concepts to non-technical stakeholders.Critical thinking
Analysing problems and developing solutions; evaluating security risks.Problem-solving
Addressing security challenges with creative and effective solutions.Teamwork
Collaborating across departments to implement security measures.
- Attention to detail
Identifying potentially overlooked security vulnerabilities.
The webinar emphasised that the combination of technical knowledge and soft skills creates well-rounded cyber security professionals who can work effectively within organisations.
Listen to the free webinar
Want to know more about how to take the next step in your cyber security career? Download the webinar recording to learn more about positioning yourself as a top candidate in this dynamic field.
Key cyber security roles
The webinar discussed various leadership positions in cyber security, distinguishing between management and directorial roles:
Cyber Security Manager
- Manages day-to-day security operations
- Implements security policies and procedures
- Oversees security team members
- Handles tactical security operations
Cyber Security Director
- Takes a strategic approach to security
- Aligns security initiatives with business objectives
- Works at executive level to influence security decisions
- Sets policies and selects tools/suppliers
CISO (chief information security officer)
- Executive-level position responsible for organisation’s security strategy
- Has a “seat at the table” with top decision-makers
- Oversees all aspects of security program
- Reports to board on security posture and initiatives
The experts noted that the key difference between managerial and directorial roles lies in decision-making authority and strategic involvement. Directors set policy and make high-level decisions about tools and suppliers, while managers translate strategies into action plans for teams.
Career pathways and certifications
The webinar outlined typical career progression pathways in cyber security, emphasising the importance of recognised certifications to validate knowledge and skills:
- Foundation level
Cyber Security Foundation, CISMP (Certificate in Information Security Management Principles) - Intermediate Level
CISM (Certified Information Security Manager), Security+ by CompTIA - Advanced Level
CISSP (Certified Information Systems Security Professional) - Specialisation
CCSP (Certified Cloud Security Professional), specialized certifications in areas like penetration testing, incident response
The panel specifically highlighted CISSP as a significant credential for senior roles, noting that it’s one of the most sought-after certifications for management positions. They also emphasised the growing importance of Cloud security qualifications like CCSP as organisations increasingly migrate to Cloud environments.
Beyond these core security certifications, the webinar also recommended broadening expertise with qualifications in related fields:
- ISO 27001 (information security management)
- Risk management certifications
- Business continuity certifications
- GDPR and data privacy qualifications
The panel advised that while career paths aren’t always linear, continuing education and regular certification should be part of a cyber security professional’s long-term career strategy.
Transitioning into cyber security
An encouraging message from the webinar was that professionals from various backgrounds can successfully transition into cyber security roles. The panel noted that certain skills from different fields transfer well to cyber security:
- From IT
Technical knowledge of systems and networks provides a strong foundation. - From compliance
Experience with regulations and auditing translates well to security compliance roles. - From legal
Understanding regulatory frameworks helps with compliance aspects of security. - From business
Commercial understanding helps align security with business objectives.
The panel emphasised that foundational certifications provide an excellent entry point for career changers, allowing them to build on their existing skills while developing specific security expertise.
The rewards of a cyber security career
Beyond strong compensation, the webinar highlighted several benefits of pursuing a career in cyber security:
- Job security
Continuous demand for cyber security skills across all industries. - Career growth
Clear pathways for advancement from technical to leadership positions. - Dynamic environment
Always-evolving challenges that keep the work engaging. - Global opportunities
Demand for cyber security professionals exists worldwide. - Meaningful work
Protecting organisations and individuals from harm.
If you are in cyber security, you would always have something to do. You may not be a multi-billionaire, you may not be a multi-millionaire, but I believe that for the rest of your life, you would have something to cater for yourself.
The panel emphasised that as hardware and software continue to proliferate across all industries, the need for cyber security professionals will only increase, making it a future-proof career choice.
Building your three-part career development strategy
The webinar concluded with a three-pronged approach to cyber security career development:
1. Knowledge acquisition
- Pursue relevant certifications
- Stay informed about regulatory changes
- Follow industry publications and thought leaders
- Understand related standards and frameworks
2. Experience building
- Volunteer for security projects within your organisation
- Participate in security assessments
- Gain hands-on experience with security tools
- Apply for roles that allow you to develop security skills
3. Expand on personal strengths
- Apply organisational skills to security documentation
- Use communication skills to translate technical concepts
- Deploy analytical thinking for risk assessment
- Build a reputation as a reliable security resource
The experts emphasised that while this strategy isn’t strictly linear, balancing ongoing education with practical experience and developing core professional competencies provides the strongest foundation for a successful cyber security career.
Conclusion
The cyber security landscape continues to evolve, creating significant opportunities for professionals with the right credentials and experience. Whether you’re starting your career, looking to specialise, or aiming for management positions, there’s a clear pathway forward.
Key takeaways from the webinar include:
- Focus on high-demand skills like identity and access management, Cloud security, and incident response
- Pursue recognised certifications appropriate to your career stage
- Develop both technical skills and soft skills like communication and critical thinking
- Gain practical experience through projects and hands-on application
- Consider specialising in emerging areas like cloud security
- Build a continuous learning mindset to keep pace with the evolving field
By following these guidelines and consistently investing in professional development, you can build a rewarding career in cyber security that offers job security, growth opportunities and competitive compensation.
Explore IT Governance’s range of certified training courses designed to build your expertise and enhance your professional credentials.
The post Building Your Cyber Security Career: The Credentials Needed for Management and Specialist Roles appeared first on IT Governance Blog.
