Job Opportunity: Unqualified AND Underpaid

<p>We spend a good portion of this episode of the CISO/Security Vendor Relationship Podcast mocking unrealistic job listings that ask for too many unnecessary credentials and on top of it aren't willing to pay a fair market rate. Did companies forget that it's a buyers' market right now in security?</p> <p>On this episode of the podcast we discuss:</p> <ul> <li>The security semantics of "responsibility" vs. "accountability": Which one drives which behavior? And it is possible to try to compel one to the detriment of the other? See <a href= "https://www.linkedin.com/pulse/should-you-hold-employees-accountable-cyber-security-chad-loder/?lipi=urn%3Ali%3Apage%3Ad_flagship3_profile_view_base%3BFSfCrU%2BkRZOvEqHGRLe6Jw%3D%3D&licu=urn%3Ali%3Acontrol%3Ad_flagship3_profile_view_base-recent_activity_article_see_more"> Chad Loder's post for more</a>.</li> <li>How do you motivate employees to be concerned about security outside of hammering them with pen tests and fake phishing emails? If it hasn't happened already, those tests to see how secure your environment is may backfire. What can you do to instill secure behavior without testing employees to the point of annoyance?</li> <li>What do you think of this pitch? We get a split decision on a pitch of a company that's operating in a new category. Plus, advice on what never to do in a pitch.</li> <li>Unrealistic expectations for position descriptions: Job descriptions in the security field seem to be getting longer, with more certification requirements, and lower pay. What's going on and do companies who list these types of jobs realize they're only hurting themselves? In a buyers' market you can't just put out an unrealistic job posting to "see who will respond." It will actually damage your brand.</li> <li>Plus, a 10-second security tip (that's a few seconds longer): It's what you should be doing, but probably aren't doing.</li> <li>And a visit from the host of The Cyberwire: Dave Bittner, from The Cyberwire, joins us for a discussion about his daily security tech news show