The Security Collective Podcast

David Jorm is the Senior Manager at Commonwealth Bank, a business that offers a full range of financial services to help all Australians build and manage their finances.

David has been working in the tech industry for 20 years, with a focus on managing security teams for the last 7 years. His experience has spanned government, corporate, and startup environments in several countries.

During this episode, David will talk about the skills a CIO should be looking for if they want to advance a technical person into a leadership role. Learn the challenges of hiring and retaining staff including ways to building an effective team through diversity. Find out what you need to know about working with a third-party recruiter.

Links:

• LinkedIn

Time Stamps:

• 00:30 - David's background and introduction
• 03:06 - How the 'skills crisis' impacts vendors and in-house teams
• 06:14 - Types of tasks and skills to outsource verse utilizing your team
• 08:22 - The challenges of hiring and retaining staff
• 10:40 - Building an effective team through diversity
• 14:26 - "I can control the team culture and the way that we operate. It will attract people and candidates that other people wouldn't get." - David Jorm
• 14:25 - The transition from a technical expert to becoming a leader
• 18:18 - "You want to see evidence that they are acting in a senior capacity without having the title and the title or the pay rise follows." - David Jorm
• 19:59 - Using third-party recruiter when hiring new staff
• 23:26 - David gives advice to his much younger self

David Jorm is the Senior Manager at Commonwealth Bank, a business that offers a full range of financial services to help all Australians build and manage their finances.

David has been working in the tech industry for 20 years, with a focus on managing security teams for the last 7 years. His experience has spanned government, corporate, and startup environments in several countries.

During this episode, David will talk about the skills a CIO should be looking for if they want to advance a technical person into a leadership role. Learn the challenges of hiring and retaining staff including ways to building an effective team through diversity. Find out what you need to know about working with a third-party recruiter.

Links:

• 
LinkedIn

Time Stamps:

• 00:30 - David’s background and introduction
• 03:06 - How the ‘skills crisis’ impacts vendors and in-house teams
• 06:14 - Types of tasks and skills to outsource verse utilizing your team
• 08:22 - The challenges of hiring and retaining staff
• 10:40 - Building an effective team through diversity
• 14:26 - “I can control the team culture and the way that we operate. It will attract people and candidates that other people wouldn’t get.” - David Jorm
•  14:25 - The transition from a technical expert to becoming a leader
• 18:18 - “You want to see evidence that they are acting in a senior capacity without having the title and the title or the pay rise follows.” - David Jorm
• 19:59 - Using third-party recruiter when hiring new staff
• 23:26 - David gives advice to his much younger self

Karen Worstell is the CEO of W Risk Group, a Denver based cybersecurity consultancy focused on helping companies demonstrate due diligence to a defensible standard of care. Karen has also been the CEO of AtomicTangerine, a Silicon Valley startup, and tenure as Chief Information Security Officer (CISO) at Microsoft Corporation, AT&T Wireless, and Russell Investments.

During this episode, Karen will share how leaders can build and cultivate a successful security team through her diversity and sourcing plans. Follow the discussed core principles when building and aligning your security team. Learn how the 'skills crisis' is effecting the hiring process and the impact the 'Be an ally' program has on the tech industry.

Links:

• LinkedIn
• FaceBook

Time Stamps:

• 00:31 - Karen's background and introduction
• 04:30 - Why there are so few women in cyber security
• 09:05 - "A personal resilience, level of confidence, and ability to do self-advocacy outside of a formal environment are very important to women for being able to advance their career." - Karen Worstell
• 11:18 - The role diversity plays in hire practices and sourcing plans
• 12:57 - "We want to create an environment that's welcoming for everyone." - Karen Worstell
• 15:01 - Core principle to follow when building and aligning security teams
• 17:57 - "In order for us to be successful in the long term, we have to have people that are really good at change." - Karen Worstell
• 18:53 - Which roles you may want to our course verse in-house employees
• 20:23 - How the 'skills crisis' affects the hiring process
• 23:06 - The impact that 'Be an ally' has on the tech industry
• 27:12 - Karens best advice to her younger self

Karen Worstell is the CEO of W Risk Group, a Denver based cybersecurity consultancy focused on helping companies demonstrate due diligence to a defensible standard of care. Karen has also been the CEO of AtomicTangerine, a Silicon Valley startup, and tenure as Chief Information Security Officer (CISO) at Microsoft Corporation, AT&T Wireless, and Russell Investments.

During this episode, Karen will share how leaders can build and cultivate a successful security team through her diversity and sourcing plans. Follow the discussed core principles when building and aligning your security team. Learn how the ‘skills crisis’ is effecting the hiring process and the impact the ‘Be an ally’ program has on the tech industry.

Links:

• LinkedIn
• FaceBook

Time Stamps:

• 00:31 - Karen’s background and introduction
• 04:30 - Why there are so few women in cyber security
• 09:05 - “A personal resilience, level of confidence, and ability to do self-advocacy outside of a formal environment are very important to women for being able to advance their career.” - Karen Worstell
• 11:18 - The role diversity plays in hire practices and sourcing plans
• 12:57 - “We want to create an environment that’s welcoming for everyone.” - Karen Worstell
• 15:01 - Core principle to follow when building and aligning security teams
• 17:57 - “In order for us to be successful in the long term, we have to have people that are really good at change.” - Karen Worstell
• 18:53 - Which roles you may want to our course verse in-house employees
• 20:23 - How the ‘skills crisis’ affects the hiring process
• 23:06 - The impact that ‘Be an ally’ has on the tech industry
• 27:12 - Karens best advice to her younger self

Craig Templeton is CISO at REA Group Limited, a leading digital business specializing in property.

Craig brings over 23 years experience in the security field, having worked for a variety of blue-chip organizations globally including IBM, Deloitte and ANZ Bank. He sits on a number of Executive Board advisory committees, has association with research institutes in London, Canberra, Sydney and Melbourne and also participates in several cyber security start-up mentoring programs including CyRise.

During this episode, Craig will share how to attract and retain high caliber talent to your organization. Learn what skills are needed to run a small business and what type of tasks to outsource. Listen to the end for crucial advice for new startups in the industry.

Links:

• LinkedIn
• Rea-group.com

Time Stamps:

• 00:31 - Craig's background and introduction
• 04:11 - "You need to be resilient within yourself to withstand organizations and structural changes within businesses." - Craig Templeton
• 05:09 - Best hiring practices when building up a team
• 09:26 - "By limiting yourself to somebody who has only ever worked in security you're actually potentially sabotaging your own recruitment efforts." - Craig Templeton
• 09:41 - Skills or roles that should be within your business and what to leave for consultants
• 12:08 - Attracting and retaining talent for internationally recognised organizations
• 14:36 - Being affected by the supposed skills crises
• 17:47 - Developing accountability outside your security team
• 20:12 - "Experience is invaluable. You need to make mistakes to grow as a person." - Craig Templeton
• 20:38 - Advice to new startups in the industry

Craig Templeton is CISO at REA Group Limited, a leading digital business specializing in property.

Craig brings over 23 years experience in the security field, having worked for a variety of blue-chip organizations globally including IBM, Deloitte and ANZ Bank. He sits on a number of Executive Board advisory committees, has association with research institutes in London, Canberra, Sydney and Melbourne and also participates in several cyber security start-up mentoring programs including CyRise.

During this episode, Craig will share how to attract and retain high caliber talent to your organization. Learn what skills are needed to run a small business and what type of tasks to outsource. Listen to the end for crucial advice for new startups in the industry.

Links:

• LinkedIn
• Rea-group.com

Time Stamps:

• 00:31 - Craig's background and introduction
• 04:11 - “You need to be resilient within yourself to withstand organizations and structural changes within businesses.” - Craig Templeton
• 05:09 - Best hiring practices when building up a team
• 09:26 - “By limiting yourself to somebody who has only ever worked in security you’re actually potentially sabotaging your own recruitment efforts.” - Craig Templeton
• 09:41 - Skills or roles that should be within your business and what to leave for consultants
• 12:08 - Attracting and retaining talent for internationally recognised organizations
• 14:36 - Being affected by the supposed skills crises
• 17:47 - Developing accountability outside your security team
• 20:12 - “Experience is invaluable. You need to make mistakes to grow as a person.” - Craig Templeton
• 20:38 - Advice to new startups in the industry

Caroline Wong is the Chief Security Strategist at Cobalt.io, a PTaaS platform that transforms yesterday's broken pen test model into a data-driven vulnerability management engine.

Caroline is a dynamic cybersecurity expert with more than a decade of industry experience as a day-to-day manager at eBay and Zynga, product manager at Symantec, and managing consultant at Cigital (now Synopsys). She also holds positions on multiple industry advisory boards, including the North American Advisory Council for ISC2 and the RSA Conference Advisory Board.

During this episode, Caroline will share how to transition from managing yourself to managing others. Learn to become a great security leader and encourage others to grow and lead. Match potential candidates with jobs that need to be filled, work with remote teams, and address compensation expectations.

Links:

• Cobalt.io
• LinkedIn
• Twitter

Time Stamps:

• 00:29 - Caroline background and introduction
• 04:08 - Will the skills crisis impact security teams and vendors?
• 06:37 - Supplementing your in-house security team and possible outsourcing options
• 10:21 - Do you really need a core security team?
• 12:44 - Overcoming dev sec ops movement challenges
• 16:18 - Transitioning into a great leader and encouraging others to grow
• 19:10 - "A great leader lays out that path to allow that person to grow." - Caroline Wong
• 19:51 - Transitioning from a maker to a manager
• 23:30 - "In order to be whatever you're going to be tomorrow you have to let go of who you are today." - Caroline Wong
• 24:03 - Matching potential candidates with jobs that need to be filled
• 25:30 - "Hiring managers often find themselves in a position where they may frankly struggle to write a job description because they are trying to figure out what should this person do?" - Caroline Wong
• 30:38 - Working with remote teams + compensation expectations

Caroline Wong is the Chief Security Strategist at Cobalt.io, a PTaaS platform that transforms yesterday's broken pen test model into a data-driven vulnerability management engine.

Caroline is a dynamic cybersecurity expert with more than a decade of industry experience as a day-to-day manager at eBay and Zynga, product manager at Symantec, and managing consultant at Cigital (now Synopsys). She also holds positions on multiple industry advisory boards, including the North American Advisory Council for ISC2 and the RSA Conference Advisory Board. 

During this episode, Caroline will share how to transition from managing yourself to managing others. Learn to become a great security leader and encourage others to grow and lead. Match potential candidates with jobs that need to be filled, work with remote teams, and address compensation expectations.

Links:

• Cobalt.io
• LinkedIn
• Twitter

Time Stamps:

• 00:29 - Caroline background and introduction
• 04:08 - Will the skills crisis impact security teams and vendors?
• 06:37 - Supplementing your in-house security team and possible outsourcing options
• 10:21 - Do you really need a core security team?
• 12:44 - Overcoming dev sec ops movement challenges
• 16:18 - Transitioning into a great leader and encouraging others to grow
• 19:10 - “A great leader lays out that path to allow that person to grow.” - Caroline Wong
• 19:51 - Transitioning from a maker to a manager
• 23:30 - “In order to be whatever you’re going to be tomorrow you have to let go of who you are today.” - Caroline Wong
• 24:03 - Matching potential candidates with jobs that need to be filled
• 25:30 - "Hiring managers often find themselves in a position where they may frankly struggle to write a job description because they are trying to figure out what should this person do?" - Caroline Wong
• 30:38 - Working with remote teams + compensation expectations

Darren Argyle is the co-founder of Cyber Resilience which delivers executive cyber leadership programs to support the next generation of cyber leaders and emerging CISO's.

Darren is an accomplished executive with close to 20 years of international cyber risk and security experience and broad expertise in providing hands-on leadership, strategic C-level/board direction and program execution. He was named in the top 100 Chief Information Security Officers globally in 2017 and the top 100 Global IT Security Influencers in 2018.

During this episode, Darren will share how to navigate the global skills crisis in search of highly experienced and well-rounded security team members. Learn when to utilize an outsourced model and when to work with permanent in-house hires. Listen for ways to overcome the biggest challenges in the cybersecurity space including his major lessons learned over his career.

Links:

• Cyberresilience.com.au
• Uk.linkedin.com/in/darrenargyle
• Twitter.com/d_argyle

Time Stamps:

• 00:32 - Darren's introduction and background
• 05:13 - Analyzing the scope of security teams
• 13:29 - Prioritizing the type of team you must hire
• 14:44 - "The first role I would always employ is an enterprise security architect who thinks about business first and technology second." - Darren Argyle
• 16:39 - Utilizing the outsourced model versus permanent hires
• 18:13 - "Anything that can be automated or highly specialized such as major breach response you could certainly outsource." - Darren Argyle
• 18:33 - Overcoming common hurdles when sourcing for the right people for your team
• 21:38 - Navigating the global skills crisis
• 24:48 - Searching for highly experienced & well-rounded team members
• 29:53 - The role diversity plans in the hiring and sourcing plans
• 30:39 - "For a senior leader to be successful: Recognize diversity." - Darren Argyle
• 34:51 - Sharing your successes and most importantly, your failures

Darren Argyle is the co-founder of Cyber Resilience which delivers executive cyber leadership programs to support the next generation of cyber leaders and emerging CISO’s.

Darren is an accomplished executive with close to 20 years of international cyber risk and security experience and broad expertise in providing hands-on leadership, strategic C-level/board direction and program execution. He was named in the top 100 Chief Information Security Officers globally in 2017 and the top 100 Global IT Security Influencers in 2018.

During this episode, Darren will share how to navigate the global skills crisis in search of highly experienced and well-rounded security team members. Learn when to utilize an outsourced model and when to work with permanent in-house hires. Listen for ways to overcome the biggest challenges in the cybersecurity space including his major lessons learned over his career.

Links:

• Cyberresilience.com.au
• Uk.linkedin.com/in/darrenargyle
• Twitter.com/d_argyle

Time Stamps:

• 00:32 - Darren’s introduction and background
• 05:13 - Analyzing the scope of security teams
• 13:29 - Prioritizing the type of team you must hire
• 14:44 - “The first role I would always employ is an enterprise security architect who thinks about business first and technology second.” - Darren Argyle
• 16:39 - Utilizing the outsourced model versus permanent hires
• 18:13 - “Anything that can be automated or highly specialized such as major breach response you could certainly outsource.” - Darren Argyle
• 18:33 - Overcoming common hurdles when sourcing for the right people for your team
• 21:38 - Navigating the global skills crisis
• 24:48 - Searching for highly experienced & well-rounded team members
• 29:53 - The role diversity plans in the hiring and sourcing plans
• 30:39 - “For a senior leader to be successful: Recognize diversity.” - Darren Argyle
• 34:51 - Sharing your successes and most importantly, your failures