Infosec certifications valuable in security job market, (ISC)2 finds

Skilled and licensed information security professionals are finding jobs and getting raises and promotions despite uncertain economic conditions globally, in accordance with a brand new survey.

The infosec certification and security careers survey reached greater than 2,200 information security professionals and was conducted by (ISC)2, a certified organization that maintains the CISSP certification. It found that highly skilled and authorized security professionals are in great desire, despite economic pressures facing enterprises. In fact, 70% of these surveyed received a salary increase in 2011 and 55% are anticipating a salary increase in 2012.

“We've become an increasing number of digital and we're creating data at overwhelming rates,” said Horde Tipton, executive director of (ISC)2. “That data creation has ended in a miles greater interest in patrolling, monitoring and administering the complex, diverse environments at enterprises today.”

The (ISC)2 Career Impact Survey was conducted from December 2011 to January 2012 and received responses from security pros in 87 countries. It painted a rosy picture of the job marketplace for security professionals. (ISC)2 found only 7% of data security professionals were unemployed at any point during 2011. Of these surveyed, 72% said their organization hired individuals for information security roles in 2011. Furthermore, 62% indicated additional permanent or contract security professionals will be sought out in 2012.

Survey respondents said hiring managers are trying to find out security pros with operations security background, security management skills and information of access control systems. Network security, secure application development and cloud and virtualization security also were desired skill sets.  

In December, hiring managers and career advisors told SearchSecurity.com that highly desired security professionals have skill sets linked to secure application development, the creation of secure mobile applications and information in securing mobile devices within the enterprise. Last year, the 2011 (ISC)2 Global Information Security Workforce Study predicted a need for application security skills. The survey found security pros increasingly considering software development activities as enterprises make it a concern to attenuate application vulnerabilities.

Tipton said the typical CISSP is averaging a $98,000 salary compared to their peers without infosec certifications, who earn approximately $78,000 a year. More individuals are taking the CISSP examination, however the fail rate is increasing, Tipton said, since the test has become more difficult because of emerging technologies.

Information security job market is hard for some
Some security professionals continue to struggle even while holding CISSP credentials. Robert Hodges, a Virginia-based security veteran who has held only three positions in additional than 30 years within the industry, was laid off from his position within the health care industry in 2010. Hodges said the character of the job market has changed drastically since he started in information security. Security pros today are inclined to jump from position to place, landing lucrative work in hot job markets, he said.

“Somewhere along the style I missed the memo that it means nothing to remain loyal in your employer,” Hodges said. “If you aren't willing to travel and need to spotlight your loved ones, your job options become severely limited.”

Hodges has stayed current on his skills and certifications to bypass being “pigeonholed,” and ultimately becoming irrelevant. Following his job loss, he quickly landed on his feet, taking up the role of IT director at a company within the financial industry, but he believes security industry veterans are being increasingly laid off for younger talent. Security professionals in government contractor positions also are suffering, said Hodges, who heads the local chapter of the Information Systems Security Association.

“I've seen guys go their entire career working at one desk after which suddenly the contract doesn't get picked up,” Hodges said. “All these guys drive UPS trucks until something else comes along, so it may be very difficult.”

Dig Deeper

• Folks who read this also read...