David Spark, Producer of CISO Series, and Geoff Belknap, CISO, discuss creating a pipeline of cyber talent by training existing staff, promoting employees, and investing in building talent. They explore transitioning careers through training programs and fostering a blameless post-mortem culture. Amtrak's CISO, Jesse Whaley, joins the conversation. They also highlight the significance of diversity and recommend using LinkedIn for job search and skill improvement.
Training existing staff is a viable solution to overcome the shortage of cyber talent by developing the desired skills in-house.
Creating multiple pipelines and diverse pathways, such as internships, fellowships, and transition programs, can help organizations grow their cybersecurity workforce with talented individuals from different backgrounds and experiences.
Deep dives
Training Staff and Growing Your Own Cyber Talent
The demand for cyber talent is high, and finding skilled professionals is challenging. To overcome this, organizations can focus on training their existing staff to develop the desired skills, essentially growing their own unicorns. This approach involves creating both an external pipeline by partnering with training programs and apprenticeships, and an internal pipeline by nurturing and promoting employees through their career phases. Jesse Whaley, CISO of Amtrak, shares how he transformed his team from just three members to a staff of 100 using these pipelines. The key is to prioritize skills-first hiring, where basic fundamental skills are identified in candidates and further developed through apprenticeships, internships, and tailored training programs. By investing in training and creating a diverse team, organizations can bridge the talent gap and improve cybersecurity.
Multi-Pipeline Approach to Grow Cybersecurity Talent
Jesse Whaley utilized three pipelines to build his cybersecurity talent at Amtrak. Firstly, an internship program allowed 36 interns to rotate through different roles within the cybersecurity organization, completing individual and group projects. This program aimed to nurture young talent and convert them into full-time employees. Additionally, leveraging the military Skill Bridge program allowed mid to senior-level candidates to transition into cyber roles through a fellowship program. Lastly, Amtrak's management trainee program offered opportunities for existing frontline railway workers to transition into cybersecurity careers. By providing multiple pipelines and diverse pathways, organizations can grow their cybersecurity workforce with a mix of talented individuals from different backgrounds and experiences.
Creating a Safe Learning Environment and Embracing Failure
Building a culture that values experimentation, learning, and failure is crucial in growing cybersecurity staff. By establishing an environment where it is safe to fail and encouraging employees to speak up about their mistakes, organizations can foster a culture of continuous improvement. A blameless post-mortem approach can help identify lessons learned and develop a mindset of resilience and problem-solving. Leadership plays a vital role in setting realistic tasks that require critical thinking and giving employees the freedom to discover effective solutions. Allowing mistakes to happen, encouraging questions, and providing training opportunities helps create multi-skilled, loyal team members who are empowered to contribute and grow.
Unlocking Potential through Training and Personal Development
Developing a workforce that continuously grows and adapts involves setting goals, creating development plans, and investing in personal and professional training. Mentoring, shadowing, and tailored training programs enable employees to enhance their skill sets and contribute to the team's success. Whether through formalized internships, apprenticeships, or programs for mid-career transitions, organizations can tap into talented individuals from various backgrounds and provide them with opportunities to thrive. Investing in employees' personal development and creating a safe space for experimentation and learning leads to valuable team members who bring significant value to their organization and contribute to its overall growth.
All links and images for this episode can be found on CISO Series.
The demand for cybertalent is sky high. It's very competitive to get those people with skills. What if you were to train your staff and give them the skills you want? Essentially, what if you were to grow your own unicorn?
Opal is building the next generation of intelligent identity. Identity is one of the last great enterprise frontiers. It’s fragmented with legacy architecture. Opal's mission is to empower teams to understand and calibrate access end to end, and to build identity security for scale. Learn more by at www.opal.dev.
In this episode:
What if you were to train your staff and give them the skills you want?
What if you were to grow your own unicorn?
What’s the best way to grow your staff?
How do you figure out the right mix of talent and prioritize the hiring, training, on the job, and other experiences?
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode