Rahr Corporation’s Post

Can we talk about the persistent title inflation issue affecting the term "CISO?" It's a curiosity seemingly unique to the cybersecurity industry. You wouldn't find a small business accountant calling themselves a CFO, someone running an auto shop a COO, or a senior sales person at a mom & pop calling themselves a Chief Revenue Officer. It would be silly and pretentious and roundly ridiculed - as well it should be. Your kids playing make-believe and electing someone the President of Treehouse Republic? Cute. Grown adults doing it? #cringe Why, then, do we accept the silliness around the CISO title? Is it because in actuality the title isn't really defined, certainly not in any statutory sense in the context of corporate governance, unlike the CEO and CFO roles? Is it because people still believe CISO is the org's smartest and most senior security engineer or "1337 haxx0r?" Publicly advertised CISO roles routinely get hundreds of applications, 90% of them totally unqualified sometimes, from folks as junior as entry-level security analysts, dreaming of landing that first title role they can then ride to glory for the rest of their career. How do we fix this? Because reading job postings like these isn't helping. #cybersecurity #ciso #jobsearch #recruitment #career

If a company wants a CISO and isn't able to come up with compensation commensurate with a CXO title then they don't actually NEED a CISO. They don't see the value enough to justify it. An alternative is a vCISO firm who can guide them through building out or improving their security program and be able to provide the technical and policy expertise needed. A good vCISO firm can provide an entire security team on a part-time basis and give them the expertise they need at the level of investment they're willing to make. If you're looking to demonstrate to your clients that you're taking security seriously but don't have the budget (or enough work!) to hire a full-time CISO, lets talk!

🔄 **Resume Update - Risk/Compliance Manager** 🔄 I'm excited to share that I’ve recently updated my resume to showcase my experience and skills in Risk and Compliance Management. If you’re a recruiter or hiring manager seeking talent in this area, I’d be happy to connect and discuss how I can bring value to your team. Feel free to reach out for a conversation or to request a copy of my resume. #ResumeUpdate #RiskManagement #Compliance #Hiring #CareerOpportunities #Cybersecurity #JobSearch #Networking

Fast way to get our insight into current trends… 😎 Watch out for our NEW IAC market trend videos! For hiring managers, candidates looking for a new role, or anyone interested in having a snapshot of the market across… Internal audit Risk Internal controls Compliance Give me a watch! 😊

Hiring a Chief Information Security Officer (CISO)? CISO is a critical role that requires a strategic leader who can balance the need for security with the organisation's business objectives. Don't hire blind and use our comprehensive scorecards instead! 🎯 𝐎𝐛𝐣𝐞𝐜𝐭𝐢𝐯𝐞 𝐃𝐞𝐜𝐢𝐬𝐢𝐨𝐧 𝐌𝐚𝐤𝐢𝐧𝐠: Minimise biases and make hiring decisions based on predefined criteria, ensuring fairness and attracting diverse candidates. 🎖️ 𝐑𝐞𝐝𝐮𝐜𝐞𝐝 𝐫𝐢𝐬𝐤 𝐨𝐟 𝐡𝐢𝐫𝐢𝐧𝐠 𝐦𝐢𝐬𝐭𝐚𝐤𝐞𝐬: A systematic process for candidate evaluation, promoting objective and consistent assessments. This guarantees that all candidates are judged against the same criteria, minimising the risk of costly hiring errors. 📊 𝐀 𝐭𝐞𝐦𝐩𝐥𝐚𝐭𝐞 𝐫𝐞𝐚𝐝𝐲 𝐭𝐨 𝐛𝐞 𝐮𝐬𝐞𝐝: Each scorecard comes with everything you need to start hiring today, including interview questions and evaluation criteria. 🔗https://lnkd.in/dKJDnKmG #scorecardMonday #hiring #HR #TalentAcquisition #HiringScorecard #Wisnio #WisGPT

GRC is not just security. It permeates the whole business. What is your view?

Why Every Organization Needs a GRC Framework and Professional 🔒 Enhanced Security Posture: A GRC framework ensures that cybersecurity measures are not just technical but also strategic, aligning with the organization's goals. 🎯 Strategic Risk Management: GRC professionals help identify, assess, and manage risks, turning potential vulnerabilities into well-handled points of control. 📈 Improved Decision-Making: With clear insights into governance, risk, and compliance, leaders can make informed decisions that propel the organization forward. 📊 Regulatory Compliance: Staying ahead of regulatory changes is crucial. A GRC framework keeps you compliant and ready for audits, avoiding costly penalties. 🤝 Stakeholder Trust: Demonstrating a commitment to GRC builds trust with customers, investors, and partners, showing that you take your responsibilities seriously. 💼 Career Opportunity: As organizations recognize the value of GRC, the demand for skilled professionals in this area is growing. It's a career that makes a difference. Join the conversation on GRC and let's discuss how it's shaping the future of organizational security and compliance. #GRC #Cybersecurity #RiskManagement #Compliance #OrganizationalGrowth #Hiring #Recruiters #HiringManagers #Opentowork

Check out a new hiring scorecard by team Wisnio. The Chief Information Security role is now a strategically important leadership function. As such, evaluating just the functional expertise is probably not sufficient. Combining a16z executive hiring manual with our data and AI, we highlighted three critical leadership competencies for this role: 1. Strategic Thinking 2. Ensuring accountability 3. Organisational awareness Check out the full competency profile together with functional requirements below.

𝗖𝘆𝗯𝗲𝗿 𝗣𝗿𝗼𝗷𝗲𝗰𝘁 𝗠𝗮𝗻𝗮𝗴𝗲𝗿𝘀 𝗔𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲 𝗙𝗼𝗿 𝗡𝗲𝘅𝘁 𝗘𝗻𝗴𝗮𝗴𝗲𝗺𝗲𝗻𝘁 🔴🔴 We've recently wrapped up a few searches for project/program managers within the cyber space and have a bench of solid candidates looking for both FTE and contract work 🔴🔴 Some profile highlights: ⚫️ Delivered strategic planning support for largescale, cross-functional security initiatives; ensured security teams aligned with CISO goals and produced increments of value; facilitated communication, identified dependencies, risks, and blockers. ⚫️ Asset lifecycle program within the IT/OT environment including inventory, assessment, data analysis, reporting, and findings remediation. ⚫️ Collaborated with Lines of Business, increasing transparency on vulnerability data and reporting; prioritized data-driven decisions; identified requirements for executive-level Security Health Dashboard and implemented automated reporting. ⚫️ Elevated awareness/criticality of vulnerability remediation; reduced business risk with targeted learning sessions; reviewed data and required actions; established monthly Security Review If you are looking to hire some talent into this space reach out greg.anderson@stottandmay.com #cybersecurity #hiring #opentowork #projectmanagement

Avoid hiring risks with comprehensive background checks from SecureCheck360. [hiring risks, background checks, SecureCheck360, risk prevention, secure hiring process]