Home » Security Leadership » Security Career/Staffing

Security Executive Search: Help Wanted

Tracy Lenzner, president of the LenznerGroup, an executive search consultancy that places CSOs, answers readers' questions about how to land a security job.

July 01, 2003 — CSO — Q: What are employers looking for when hiring a CSO?A: That's a million dollar questionand answer. The experience required is dependent on many factors. For starters, the type of company, its size, location, industry and regulatory requirementsboth domestically and globallyfactor in significantly. Industry-specific and functional-specific experience are also key. Candidates must be astute business executives in security with a strong emphasis in IT infrastructure, privacy, risk, fraud, audit and investigations that blends technology, business applications and corporate initiatives. Backgrounds may also include experience in a high-profile security role and the following:

Solid work in both security and related industries with strong knowledge of privacy, risk and global issues facing the industry
Contacts within appropriate government agencies to increase leverage and information flow on issues, legislation and trends
Operational background with business case development, financial administration and experience developing product profit and loss statements
Demonstrated leadership ability to provide direction to a diverse workforce

Q: How can a candidate for a CSO position demonstrate his qualifications?A: Some skills are easily quantifiable, such as number of years' experience, education (an undergraduate degree is most often required, and an advanced degree and CISSP are usually desired), size and type of industries served.

Personality traits must be accurately assessed in terms of benchmarking, chemistry and soft skills. Requirements will include:

A style and presence that quickly earns the respect of the technology and business executives
Ability to coordinate across organizational boundaries and demonstrate results within various business areas
Credibility as a security professional with the ability to conceptualize but also sell the concepts to the organization
Strong interpersonal skills
Inherent energy, enthusiasm, integrity and a tireless work ethic
Diplomacy
Capability to develop new and creative ideas
Polished public speaking and writing skills

Q: I currently report to the global CSO. I'm getting bored and wonder about the best way to plan for my next step. Do years of experience always trump ability?A: From a reporting relationship and functional standpoint, you are in a good position. While the number of years can be important, what you do during those years is what matters. There are many things you can achieve to progress your career. For example, do you currently perform presentations both internally and externally to trade groups or conferences? Are you active in professional associations? Do you possess a CISSP or other advanced degree or certification? When was the last time you updated your résumé or tweaked your professional bio? Are you current on the new technologies, issues, trends,