We spend a good portion of this episode of the CISO/Security Vendor Relationship Podcast mocking unrealistic job listings that ask for too many unnecessary credentials and on top of it aren’t willing to pay a fair market rate. Did companies forget that it’s a buyers’ market right now in security?
On this episode of the podcast we discuss:
- The security semantics of “responsibility” vs. “accountability”: Which one drives which behavior? And is it possible to try to compel one to the detriment of the other? See Chad Loder’s post for more.
- How do you motivate employees to be concerned about security outside of hammering them with pen tests and fake phishing emails? If it hasn’t happened already, those tests to see how secure your environment is may backfire. What can you do to instill secure behavior without testing employees to the point of annoyance?
- What do you think of this pitch? We get a split decision on a pitch of a company that’s operating in a new category. Plus, advice on what never to do in a pitch.
- Unrealistic expectations for position descriptions: Job descriptions in the security field seem to be getting longer, with more certification requirements and lower pay. What’s going on and do companies that list these types of jobs realize they’re only hurting themselves? In a buyers’ market you can’t just put out an unrealistic job posting to “see who will respond.” It will actually damage your brand.
- Plus, a 10-second security tip (that’s a few seconds longer): It’s what you should be doing, but probably aren’t doing.
- And a visit from the host of The Cyberwire: Dave Bittner from The Cyberwire joins us for a discussion about his daily security tech news show and to tell us about the launch of two more security podcasts.
As always, the show is hosted by me, David Spark (@dspark), founder, Spark Media Solutions and Mike Johnson, CISO, Lyft. Our guest this week is Dan Glass, former CISO (as of just a couple days ago) of American Airlines.
Contributions. Contributions. Contributions.
I am cranking out a ton more content for not just the podcast, but also the entire series so I am very open and receptive to story ideas, suggestions for segments of the podcast or anything else. Just connect with me on LinkedIn.
Listen and Subscribe to the CISO/Security Vendor Relationship Podcast
So many ways to connect and listen to the podcast.