Hi all,

I would like to get your input regarding the right profile of a “Security Awareness Officer”. Apparently there is not right or wrong however I have seen positions descriptions requiring an advanced degree in CS, CISSP and/or CISM certification and at least five (5) years of experience.

On the other hand some instructors at SANS advice the following requirements as the essential criteria:
– Interest in current security issues
-Strong communicator with the ability to influence internal and external stakeholders and to gain buy in for user education efforts.
– First rate presentation skills
– Excellent time management skills and adaptability to change direction with very short notice
– Flexibility to adapt to changing priorities and demands.

So the question is: Is necessary to have a tech background to be a good “security awareness officer”?

Thank you for your time and consideration.

Topic