• United States



by CSO Staff

Security Executive Search: Help Wanted

Jul 01, 20034 mins

Tracy Lenzner, president of the LenznerGroup, an executive search consultancy that places CSOs, answers readers' questions about how to land a security job.

Q: What are employers looking for when hiring a CSO?

A: That’s a million dollar question

and answer. The experience required is dependent on many factors. For starters, the type of company, its size, location, industry and regulatory requirementsboth domestically and globallyfactor in significantly. Industry-specific and functional-specific experience are also key. Candidates must be astute business executives in security with a strong emphasis in IT infrastructure, privacy, risk, fraud, audit and investigations that blends technology, business applications and corporate initiatives. Backgrounds may also include experience in a high-profile security role and the following:
  • Solid work in both security and related industries with strong knowledge of privacy, risk and global issues facing the industry
  • Contacts within appropriate government agencies to increase leverage and information flow on issues, legislation and trends
  • Operational background with business case development, financial administration and experience developing product profit and loss statements
  • Demonstrated leadership ability to provide direction to a diverse workforce
Q: How can a candidate for a CSO position demonstrate his qualifications?A: Some skills are easily quantifiable, such as number of years’ experience, education (an undergraduate degree is most often required, and an advanced degree and CISSP are usually desired), size and type of industries served.

Personality traits must be accurately assessed in terms of benchmarking, chemistry and soft skills. Requirements will include:

  • A style and presence that quickly earns the respect of the technology and business executives
  • Ability to coordinate across organizational boundaries and demonstrate results within various business areas
  • Credibility as a security professional with the ability to conceptualize but also sell the concepts to the organization
  • Strong interpersonal skills
  • Inherent energy, enthusiasm, integrity and a tireless work ethic
  • Diplomacy
  • Capability to develop new and creative ideas
  • Polished public speaking and writing skills
Q: I currently report to the global CSO. I’m getting bored and wonder about the best way to plan for my next step. Do years of experience always trump ability?A: From a reporting relationship and functional standpoint, you are in a good position. While the number of years can be important, what you do during those years is what matters. There are many things you can achieve to progress your career. For example, do you currently perform presentations both internally and externally to trade groups or conferences? Are you active in professional associations? Do you possess a CISSP or other advanced degree or certification? When was the last time you updated your résumé or tweaked your professional bio? Are you current on the new technologies, issues, trends, legislation and business issues of security? Are you involved in strategy, implementation and global initiatives? How is your speaking and writing performance? And what are you currently doing to progress in these areas? If you can answer all of those questions, great for you. If you have holes in any areas, get to work.Q: Any advice for those over 50 years old who want to land a CSO position?A: It’s never too late. If you have a progressive career record managing and leading large global organizations, you have a good start. Notwithstanding, at this point in your career, you need to possess all the right stuff. For anyone seeking or holding a CSO position, there is a relatively small learning curve available. At that level, a critical ingredient is to become knowledgeable of the corporate environment, to rapidly establish oneself as an effective member of the executive team and to be able to strategize. One must have the ability to proactively deal with ambiguity, possess flexibility and build consensus throughout tenure. A high level of experience, effectiveness, vision, determination and knowledge, coupled with integrity, professional and business acumen are essential. A certain degree of charisma to effectively articulate business and technology issues is also a plus.