In Depth
10 Tough Job Interview Questions, and How to Answer Them
Recently hired CSOs share what hiring execs want to know in interviews.
By Daintry Duffy
9. Are you a risk-taker?
Security executives are often walking a fine line when they talk about risk with business owners. Business leaders want a CSO who is a risk-taker because they want to do more, do it faster, and they don't want a security executive who constantly says no. In the interview you have to demonstrate that you have a balanced approach to risk and that you are willing to explore ways that the company can take on more risk if that's what it wants to do. "We've all got great examples about how we said no," says Garigue. "What we need are examples of how we said 'yes, take the risk,' but in a controlled way."
10. What does this role mean to you?
Once you've gotten through some of the more technical and strategic questions, it's likely that at least one interviewer will throw you an open-ended question like this one. This is your chance to talk about what makes you unique. When Baird was asked this question at United Rentals, it was a welcome opportunity to lay out his perspective. "I explained what I could bring to the table, how I would fit in, and I was candid about the type of organization that I wanted to build. It was a chance to then turn the question back to them and ask if that was the kind of security organization they wanted in their company," he says.
One final thought: CSOs are still the new kids on the block. So don't get hung up on giving the "right" answer or projecting yourself as a traditional CSO, because there is no such thing. "Remember," says Garigue, "the different organizations, problems and laws that you have had to work with have evolved you into the person you are today."
Other stories by Daintry Duffy
job interview questions
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.



