I have actually grown up with the security field. I am one of the high school kids in the 70s who first built my own computers then got a desktop computer where I wrote my own programs. Other kids and I were connecting using phone modems and sharing information from the beginning. As the technology world has grown, security began to emerge as something that needed to be addressed. I was involved from the beginning where we added passwords to applications. Security looks different now that we live in a highly complex, integrated world.

I think many of us ask “how did I get here?” when it comes to our careers. I believe my combination of working in the leading edge of technology combined with business development related roles gave me a good perspective on how to architect solutions for clients while at the same time meeting their business needs.

I think our work around monetary quantification of cyber risk is what can impact organizations the most. We are using the Factor Analysis of Information Risk (FAIR) model and working with major companies in quantifying their risk for daily business decisions. In one case, the resulting action was not to implement new security protocols but to go back to the source of the data (a client) and change their contract to reduce the overall risk of the company.

Three really important qualities: 1) Possess business and technical experience, 2) Read every day to keep up with the rapidly changing cyber world and 3) Be a good writer and speaker. This last one is a major shortcoming in the cybersecurity field right now. We have brilliant minds working in our field but their limited ability to communicate those ideas hinders both their growth and the growth of organizations. Often, the solutions chosen by management are not based on the best technical/business options but by who presented their option in the most clear and convincing manner. We need to emphasize that with younger people both in college and starting out: Learn to write and speak.

Be broad in your experience. We are in a field where most people will change jobs every four or five years. Don’t take a job just like that last one. Try new things. I have worked in the Pentagon, for a software development startup, a research company and a lobbying firm. Don’t be afraid to try new things.