Career on Rishipal Yadav · not your CISO

Bridging the Skill Gap in Cybersecurity — Hire Generalists, Create Specialists!

Fri, 20 Jan 2023 00:00:00 +0000

This article was originally published on not your CISO on Medium. Read the full post →

I have seen a lot of posts about the skill gap, unrealistic hiring expectations, and the number of open security roles. Most of them circle the same frustration: organisations want five years of experience in a technology that has existed for two, and then complain they can’t hire.

But I think the framing is wrong. The skill gap isn’t primarily a supply problem — it’s a hiring and development problem. Organisations have been optimising for the role they need filled today, not the practitioner they need in three years.

Cybersecurity Roadmap 2023: How Do I Start in Cybersecurity?

Fri, 13 Jan 2023 00:00:00 +0000

This article was originally published on not your CISO on Medium. Read the full post →

How do I start in cybersecurity? What basic skills do I need to get into cybersecurity?

These are the questions I get most often — from students, from software engineers eyeing a pivot, from IT professionals who want to move into security. There is no single right answer, but there are a lot of wrong approaches, and this guide is my attempt to cut through the noise.

So You Do Not Want to Become a CISO Anymore?

Sun, 09 Oct 2022 00:00:00 +0000

This article was originally published on not your CISO on Medium. Read the full post →

There has been quite a chatter in the security community for the last couple of weeks. It is always some discussion — be it a new breach, a new framework, or a regulatory shift — but this one felt different.

The conversation: is the CISO role broken? Between the SolarWinds aftermath, the SEC charging CISOs personally, the expectation of omniscience with the authority of a middle manager, and the burnout rates — a lot of security professionals who once had the CISO job as their north star are quietly reconsidering.

My Cybersecurity Journey

Wed, 25 May 2022 00:00:00 +0000

This article was originally published in the (ISC)² blog and cross-posted on not your CISO on Medium. Read the full post →

I found my first position at a college placement fair. I began working as a software engineer building a digital security platform at HSBC — designing the backend for secure authentication and authorisation for mobile banking apps. It was more of a software development job, but I had to learn a lot about security concepts to actually do it well.