Job Opportunity: Unqualified AND Underpaid – CISO/Security Vendor Relationship Podcast

We spend a good portion of this episode of the CISO/Security Vendor Relationship Podcast mocking unrealistic job listings that ask for too many unnecessary credentials and on top of it aren’t willing to pay a fair market rate. Did companies forget that it’s a buyers’ market right now in security?

On this episode of the podcast we discuss:

  • The security semantics of “responsibility” vs. “accountability”: Which one drives which behavior? And is it possible to try to compel one to the detriment of the other? See Chad Loder’s post for more.
  • How do you motivate employees to be concerned about security outside of hammering them with pen tests and fake phishing emails? If it hasn’t happened already, those tests to see how secure your environment is may backfire. What can you do to instill secure behavior without testing employees to the point of annoyance?
  • What do you think of this pitch? We get a split decision on a pitch of a company that’s operating in a new category. Plus, advice on what never to do in a pitch.
  • Unrealistic expectations for position descriptions: Job descriptions in the security field seem to be getting longer, with more certification requirements and lower pay. What’s going on and do companies that list these types of jobs realize they’re only hurting themselves? In a buyers’ market you can’t just put out an unrealistic job posting to “see who will respond.” It will actually damage your brand.
  • Plus, a 10-second security tip (that’s a few seconds longer): It’s what you should be doing, but probably aren’t doing.
  • And a visit from the host of The Cyberwire: Dave Bittner from The Cyberwire joins us for a discussion about his daily security tech news show and to tell us about the launch of two more security podcasts.

As always, the show is hosted by me, David Spark (@dspark), founder, Spark Media Solutions and Mike Johnson, CISO, Lyft. Our guest this week is Dan Glass, former CISO (as of just a couple days ago) of American Airlines.

Special thanks to SpyCloud for sponsoring this episode. Learn more about how you can protect employees and customers from account takeover with SpyCloud.

Contributions. Contributions. Contributions.

I am cranking out a ton more content for not just the podcast, but also the entire series so I am very open and receptive to story ideas, suggestions for segments of the podcast or anything else. Just connect with me on LinkedIn.

Listen and Subscribe to the CISO/Security Vendor Relationship Podcast

So many ways to connect and listen to the podcast.

Featured eBook
The Main Application Security Technologies to Adopt by 2018

The Main Application Security Technologies to Adopt by 2018

As hacker attacks on the application layer evolve, the need for application security that provides continuous coverage and real-time protection and remediation becomes a top priority. The tools and practices that used to provide security to organizations no longer provide a complete solution in today’s developer ecosystem. Security practices need to change, being implemented and ... Read More
WhiteSource

David Spark

David Spark is a veteran tech journalist with nine years experience covering cybersecurity. He has partnered with Security Boulevard to continue his popular CISO/Security Vendor Relationship Series. Spark is also the founder of the Spark Media Solutions, a B2B content marketing agency for the tech industry. He's a former standup comic, comedy writer for The Second City in Chicago, and San Francisco tour guide.

david-spark has 25 posts and counting.See all posts by david-spark