#IamISACA: Playing the Long Game and Making a Difference

Author: William Carlson, Director of IT and Cybersecurity
Date Published: 3 June 2020

Many people have a galvanizing moment when they are certain about their career goals. That definitely isn’t what my path in cybersecurity looks like. In fact, I originally majored in vocal performance, but decided after two years of study that my career outlook as an opera theater performer didn’t meet my goals for a stable career and family.

Thankfully, I ended up in the school of business because my family had always had a business. I was also fortunate to have a professor identify my abilities and take me under her wing. It may seem strange to many people to go from the arts to a business/engineering role, but I’ve found there is great value in creativity in both of these spaces, particularly cybersecurity. If we blindly follow the same formulas for success we always have, the adversary will creatively work their way around us as defenders.

In addition to creative solutions, there is immense power in the multiplying power of people. To that end, I put a lot of focus on networking and mentoring in the cybersecurity field. I joined the North Texas (USA) chapter of ISACA because it was a great, approachable way to connect with industry peers in my area and learn from their experiences. I strongly encourage everyone, despite their busy schedules, to make the time to connect with others in a meaningful way. There are very few things you can do that will pay as large a dividend for your personal and career growth. Sure, this is a long-game tactic. It doesn’t pay off overnight, but the rewards far exceed the costs. Having peers to help you along your career journey can help you reach your goal much more efficiently. It helps that the cybersecurity community is so welcoming and helpful in general. If your community isn’t giving you what you need, keep looking.

If you’re further along in your career journey, networking is an opportunity for you to give back to the community. I am a chief mentor for Cybrary in a community of over 10,000 members. The opportunity to give back and positively impact others continually inspires me. If you already have a mentor and don’t think you need larger community, I’d challenge your view a bit. In the Cybrary community, we don’t do 1-on-1 mentoring typically, and I applaud that. Going 1-on-1 makes it critical that you pick the right person to be your mentor, and when you’re entering a new career field, you might not know exactly who you need as a mentor. Also, there is often a difference in who you think you want and who you really need. For example, many people gravitate toward those at the tops of their careers, CISOs, but when you’re entry-level in your career, there is such a gap between where you are and where CISOs are that they might not have the most actionable information for you. When you’re deeply connected in your community you can combat this by getting trusted opinions from many people in various places in their careers. Finding community is key.

Let’s face it, we can all use some help in our careers. In a field as broad and as deep as cybersecurity, we’re asked to understand and accomplish so much, and any help should be welcomed (anyone who has studied a certification review manual can attest). So, if you feel like you have everything covered and don’t need any guidance along the way, you’re probably in for a rude awakening. Reach out early and often to your peers and community. They’ll make all the difference in the world.

Invest time in your career and community, but don’t forget to take some time for yourself. In a field as challenging as security, it’s important to find some escapes outside work. Long-distance cycling, road bike, has become a huge interest for me. Working a desk job and staring at computer screens all day, I realized it was well past time to become more active or pay the price. Cycling 100 miles at a time in the notorious Texas heat and humidity is no joke, but I have come to really enjoy long-distance rides, and participating in races that support worthy charities makes it all the better.

Invest in your career, find your community to help you accomplish these goals, and remember to take time for yourself. In the end, for me, it is all about how we can help each other. We’re all better when we do this one thing well. When you’re connected in community, you never know what opportunities will come up. Maybe you’ll land the dream interview because of someone you exchanged cards with at an ISACA chapter meeting. Maybe you’ll save someone years on their career journey by sharing advice that was simple for you to give. Maybe you’ll be lucky enough, like me, to get to donate a kidney and save the life of a long-time friend. I’m certain you’ll learn a lot along the way. As for donating a kidney, I learned that disaster planning is important personally, not just professionally. The doctors won’t let me donate again, but if I could, I would happily do so.

If you aren’t connected with a community, I can’t encourage you enough to do so.