UK

United Kingdom · Technology and data · C-Suite (20+ years)

VP of Security / CISO

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

Start my VP of Security / CISO plan, free

Free to start: a plan built for this role, and a Future Fluency module to try first. No card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Upskilling a team in this role? Talk to us

  • Experience bandC-Suite (20+ years)
  • Direct reports100 reports
  • Reports toCEO / Board of Directors
  • UK framework levelUsually an executive or board-level role

Also advertised as Chief Information Security Officer · Global Head of Information Security · Chief Security Officer · Executive Director, Enterprise Security

Built on 43,079 real UK job descriptions we analysed · grounded in qualifications employers recognise

Two short quizzes about you

1From this job to a course

The qualifications matched to this job

OCN NI Entry Level Certificate in Personal Success and Well-Being (Entry 3) Open College Network Northern Ireland · Entry Level · covers 1 of 10 standards
ATHE Level 6 Award in Security Risk Management Consultancy ATHE Ltd · Level 6 · covers 4 of 10 standards
Qualifi Level 7 Diploma in Cyber Security Qualifi Ltd · Level 7 · covers 3 of 10 standards
ATHE Level 7 Extended Diploma in Computing ATHE Ltd · Level 7 · covers 1 of 10 standards
iCQ Level 7 Certificate in Strategic Management and Leadership iCan Qualifications Limited · Level 7 · covers 1 of 10 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

Managing Risk OCN NI Entry Level Certificate in Personal Success and Well-Being (Entry 3)
Information and Cyber Security ATHE Level 6 Award in Security Risk Management Consultancy
Security Management and Governance Qualifi Level 7 Diploma in Cyber Security
Implementing and Managing Cyber Security ATHE Level 7 Extended Diploma in Computing Technologies (Software Engineering)
Managing and Implementing Information Security ATHE Level 7 Extended Diploma in Computing
Establish organisational governance controls iCQ Level 7 Certificate in Strategic Management and Leadership

The future skills this job leans on

AI Fluency working with AI as a thinking partner
Data Fluency turning numbers into a decision
AI Governance Fluency using AI responsibly
Automation Fluency building AI into how work runs
Trust Fluency keeping the digital world safe
Start my VP of Security / CISO plan, free
Your Plan Illustration

Built for VP of Security / CISO

6 units that map to this job, from the qualifications that cover it.

  1. Managing Risk Open College Network Northern Ireland · covers 1 of 10 standards Entry Level
  2. Information and Cyber Security ATHE Ltd · covers 4 of 10 standards Level 6
  3. Security Management and Governance Qualifi Ltd · covers 3 of 10 standards Level 7
  4. Implementing and Managing Cyber Security ATHE Ltd · covers 1 of 10 standards Level 7
  5. Managing and Implementing Information Security ATHE Ltd · covers 1 of 10 standards Level 7
  6. Establish organisational governance controls iCan Qualifications Limited · covers 1 of 10 standards Level 7
These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as a VP of Security / CISO?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

  • AI-Driven Security & Governance
  • Quantum-Safe Cryptography Strategy
Why each one is rising

The future skills this job leans on

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your VP of Security / CISO plan as you set up, starting with a Future Fluency module on using AI in your job. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

Start my VP of Security / CISO plan, free Ready to pay? Subscribe for £70 a month

3What this role really is

A VP of Security or CISO holds overall responsibility for an organisation's information security, answering to the board when things go wrong.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

Multi-Cloud Security Platforms (e.g., Prisma Cloud, Wiz, Lacework) Strategic/Architect

Leading the multi-cloud security strategy, making platform selection decisions (e.g., 'Do we consolidate on Prisma Cloud or use native tools?'), owning the enterprise-wide configuration, and managing the budget for these critical platforms.

IaC Security Platforms (e.g., Checkov, Snyk IaC, Bridgecrew) Strategic/Architect

Architecting the entire 'shift-left' security model for infrastructure as code. This means selecting and implementing the enterprise IaC scanning platform and defining the guardrails and policies that block insecure deployments across all development teams.

SIEM / SOAR Platforms (e.g., Splunk Enterprise Security, Azure Sentinel, Chronicle) Strategic/Architect

Owning the SIEM/SOAR architecture and data ingestion strategy for the entire enterprise. This includes managing multi-million pound licensing or consumption budgets and presenting threat intelligence trends to the Board based on platform data.

Container & Application Security Platforms (e.g., Aqua Security, Palo Alto Prisma Cloud Defender) Strategic/Architect

Setting the enterprise strategy for container security, from base image hardening to runtime protection and secrets management (e.g., HashiCorp Vault). You'll evaluate and select the vendor for the entire ecosystem, ensuring robust protection for our cloud-native applications.

Identity & Access Management (IAM) Ecosystem (e.g., AWS IAM, Azure Entra ID, Okta, CyberArk) Strategic/Architect

Architecting the global identity strategy, including federation with Okta/Ping Identity, privileged access management (PAM) with CyberArk, and defining the long-term vision for a Zero Trust identity model across all cloud and on-premise environments.

GRC & Board Reporting Systems (e.g., ServiceNow GRC, OneTrust, Diligent, BoardVantage) Expert

Using these platforms to generate comprehensive risk posture dashboards for the Board and executive team. You'll leverage tools like Diligent or BoardVantage to securely distribute sensitive security reports and audit findings to executive leadership and external stakeholders.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choiceComing in Where you are nowThe step above
Enterprise Security Strategy N/A N/A N/A
Cloud Security Platform Selection N/A N/A N/A
Major Incident Go/No-Go (e.g., system shutdown) N/A N/A N/A
Security Budget Allocation (over £10M) N/A N/A N/A
External Communications during a Breach N/A N/A N/A
Organisational Design of Security Function N/A N/A N/A

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Overall Security Risk Posture
Reduction in enterprise-wide security risk, as measured by our internal risk framework and external assessments.
Target · Improve Cloud Security Maturity Model (CSMM) score from Level 2 to Level 3 within 18 months, and maintain top 10% industry benchmark.

Moving from a 'Reactive' to 'Proactive' security posture, reducing the number of critical audit findings by 50% year-over-year, and seeing a 20% reduction in high-risk vulnerabilities across our cloud estate.

Business Impact from Security Incidents
Reduction in financial, reputational, and operational impact caused by security incidents.
Target · Reduce business impact from security incidents by 30% year-over-year, measured by incident cost, downtime, and data loss metrics.

Successfully containing a major ransomware attack within 24 hours with zero data exfiltration, compared to a similar incident last year that caused 72 hours of downtime and a £5M loss.

Regulatory Compliance & Audit Performance
Achieving and maintaining full compliance with all relevant industry regulations and passing external audits without major findings.
Target · Achieve and maintain 100% pass rate on all major audits (SOC 2, ISO 27001, GDPR, PCI DSS) with zero material findings.

Successfully renewing our ISO 27001 certification with no non-conformities, and receiving a clean SOC 2 Type II report for the third consecutive year.

Security Budget Management
Effective allocation and management of the security budget to maximise return on investment and stay within financial targets.
Target · Manage a multi-million pound security budget to within 5% of forecast, demonstrating clear ROI for major security investments.

Delivering a new cloud security platform implementation £200K under budget, while still achieving all project objectives and showing a 15% reduction in cloud security operational costs.

Executive & Board Confidence
The level of trust and confidence the executive team and board have in the security programme and leadership.
Target · Achieve consistent 'Strong' or 'Excellent' ratings in annual board and executive feedback surveys regarding security programme effectiveness and communication.

The CEO regularly references the security team's proactive measures in investor calls, and the Audit Committee consistently praises the clarity and comprehensiveness of security reports.

Strategic Influence & Thought Leadership
How effectively you shape the company's overall strategy by embedding security considerations from the outset, and how you represent us in the broader industry.
  • Security is a standing item on the ELT agenda, not just when there's a problem. You're proactively consulted on new product launches and M&A activities. You're invited to speak at major industry conferences, and our security approach is cited as an example by peers.
Crisis Leadership & Communication
Your ability to lead effectively and communicate clearly during high-pressure security incidents, both internally and externally.
  • During a major incident, you maintain calm, provide clear direction, and deliver composed, factual updates to the board and, if necessary, the public. Post-incident reviews consistently highlight your leadership as a critical factor in successful resolution.
Security Culture & Talent Development
The extent to which you foster a strong security culture across the organisation and build a high-performing, engaged security team.
  • Employee surveys show a high level of security awareness and engagement across all departments. The security team has low attrition rates, high internal promotion rates, and is recognised as a desirable place to work. You're known for developing future security leaders.
Stakeholder Trust & Collaboration
The level of trust and effective working relationships you build with key internal and external stakeholders.
  • Engineering and Product VPs view security as a partner, not a blocker, and actively seek your input early in the development cycle. Regulators see us as a transparent and responsible organisation. Our legal team trusts your judgement implicitly during sensitive investigations.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy
Protecting the Enterprise

You wake up thinking about how to better defend our systems and data. The idea of a successful breach keeps you up at night, driving you to constantly improve our defences and readiness. You genuinely feel a sense of guardianship over the company's assets and reputation.

Spending extra hours reviewing the incident response plan after a major industry attack, or advocating for a significant investment in a new threat intelligence platform because you see the clear and present danger.

Strategic Impact & Vision

You're not just reacting to threats; you're defining the multi-year security roadmap that shapes how the entire company operates securely. You love building a vision for security that enables business growth, rather than hindering it, and seeing that vision come to life.

Leading the charge on adopting a Zero Trust architecture across the organisation, not just because it's 'best practice,' but because you see how it fundamentally changes our risk posture for the better, enabling faster, safer innovation.

Building High-Performing Teams

You get immense satisfaction from recruiting, developing, and mentoring a world-class security organisation. You're passionate about creating an environment where security professionals can thrive, learn, and make a real difference, knowing that a strong team is our best defence.

Investing significant time in developing a leadership development programme for your senior managers, or personally mentoring high-potential individuals to help them achieve their career goals within the security function.

What frustrates people
  • Dealing with 'shadow IT' and unsanctioned cloud deployments.
  • Perception of security as a blocker by engineering teams.
  • Constant alert fatigue from numerous security tools.
  • Justifying security budgets for 'non-events' (successful prevention).
  • Being held accountable for developer security mistakes despite providing tools and training.
  • The relentless pace of new cloud services and vulnerabilities.
  • Translating complex technical risks into clear business impact for non-technical executives.
What this role does not give you
  • A quiet, predictable routine with minimal surprises.
  • The ability to make purely technical decisions without significant business context or trade-offs.
  • A role where you can avoid public speaking or high-stakes presentations.
  • An environment where you can work in isolation without constant cross-functional negotiation.
  • A guarantee that every security initiative you champion will be fully adopted and funded.

8Who you work with

This role has enterprise-wide impact, directly influencing the company's risk posture, strategic direction, market reputation, and financial stability. It dictates how we protect intellectual property, customer data, and operational continuity, making it absolutely critical to our long-term success and survival. A strong CISO can be a competitive differentiator, while a weak one can lead to existential threats.

Inside the business
  • CEO and Executive Leadership Team (ELT)
  • Board of Directors (Audit Committee)
  • Legal & Compliance
  • Chief Technology Officer (CTO) and Engineering VPs
  • Chief Financial Officer (CFO)
  • Chief Data Officer (CDO)
  • Internal Audit
Outside the business
  • Regulatory bodies (e.g., ICO, FCA, GDPR authorities)
  • External auditors (e.g., Big Four firms)
  • Industry peers and security forums
  • Law enforcement agencies
  • Customers (especially enterprise clients)
  • Investors and financial analysts
  • Media outlets (in crisis scenarios)

9What you need before you start

Not a wish list. The things you would be expected to already have.

  • Proven track record of leading and transforming large, global security organisations (100+ people).
  • Extensive experience (10+ years) in a senior leadership role (Director/VP) directly managing cloud security programmes.
  • Demonstrable experience managing multi-million pound security budgets (£10M+) and delivering measurable ROI.
  • Deep understanding of enterprise risk management frameworks and their application to cybersecurity.
  • Significant experience presenting to and influencing Board-level executives and external regulators.
  • A history of successfully navigating and leading through major security incidents and crises.
  • Expertise in at least two major cloud platforms (AWS, Azure, GCP) from a strategic security perspective.

10What to practise next

Where the job is going, and what to do about it starting this week.

Advanced Cloud Native Security Architectures

The complexity of cloud-native environments (serverless, microservices, service mesh) continues to grow. Your ability to understand and direct the security of these highly distributed, ephemeral systems is crucial for maintaining a strong defence.

Service Mesh Security (e.g., Istio, Linkerd) · Serverless Security (e.g., AWS Lambda, Azure Functions) · Data Mesh Security · Software Bill of Materials (SBOM) & Supply Chain Security

  • This quarter: Review architectural diagrams of our most complex cloud-native applications with your Lead Architects, focusing on security implications.
  • Next 6 months: Sponsor internal workshops or external training for your senior engineers on advanced cloud-native security patterns.
  • Next 12 months: Integrate SBOM requirements and supply chain risk assessments into your vendor management and procurement processes.
  • Ongoing: Maintain regular technical deep-dives with your engineering leaders to stay abreast of architectural changes and emerging threats.

Quick win: Ensure all new cloud-native projects have a mandatory threat modelling session and a security architecture review, led by your senior engineers.

11Staying current once you are in

What people here do to keep up
  • Active participation in CISO forums and industry groups (e.g., FS-ISAC, IANS, Evanta) to stay abreast of emerging threats and best practices, and to build a strong peer network.
  • Regular engagement with top-tier cybersecurity research and advisory firms (e.g., Gartner, Forrester) to inform strategic decision-making and stay ahead of market trends.
  • Continuous learning through executive education programmes focused on leadership, digital transformation, and risk management.
  • Mentoring aspiring security leaders within and outside the organisation, giving back to the community and strengthening the talent pipeline.
  • Speaking at major industry conferences and publishing thought leadership articles to enhance our company's reputation and your personal brand as a security visionary.

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

AI-Driven Security & Governance

AI is rapidly changing both the attack and defence landscape. Attackers will use AI to generate more sophisticated phishing, malware, and zero-day exploits. Defenders must use AI to detect subtle anomalies, automate responses, and manage the sheer volume of data. Your role is to govern AI's use in security, and secure AI systems themselves.

  • AI for Threat Detection & Response
  • Securing AI/ML Pipelines
  • AI Governance & Ethics in Security
  • Adversarial AI

Quantum-Safe Cryptography Strategy

Quantum computers, when they arrive, will break most of our current public-key encryption standards, rendering much of our current security infrastructure obsolete. This isn't an immediate threat, but the 'harvest now, decrypt later' risk means we need a strategy today.

  • Post-Quantum Cryptography (PQC) Algorithms
  • Cryptographic Agility
  • Inventorying Cryptographic Assets
  • Migration Roadmaps

13What you’ll use

What you’ll use

Skills this role draws on

Technical

  • Zero Trust Architecture (ZTA)
  • Threat Modeling (STRIDE/PASTA)
  • Cloud Security Posture Management (CSPM)
  • DevSecOps Integration
  • Cloud Incident Response (NIST Framework)

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

  1. 1

    Director/VP of Security at a larger enterprise

    3-5 years in a prior Director/VP role

    Skills to master

    • Scaling security programmes, managing diverse global teams, presenting to C-suite, strategic budget management, navigating complex organisational politics.

    You're ready to move on when

    • Successfully led a major security transformation initiative across multiple business units.
    • Consistently managed a security budget of £5M+.
    • Proven ability to recruit, retain, and develop senior security talent.
    • Demonstrated success in influencing executive-level stakeholders on critical security investments.
  2. 2

    CISO of a smaller or mid-sized company

    5-8 years as a CISO in a smaller organisation

    Skills to master

    • Full P&L ownership for security, direct board reporting, building a security function from the ground up, managing all aspects of security (GRC, Ops, AppSec).

    You're ready to move on when

    • Successfully achieved and maintained key compliance certifications (e.g., ISO 27001, SOC 2) as CISO.
    • Led the response to multiple significant security incidents, including external communications.
    • Built and scaled a security team and programme commensurate with business growth.
    • Developed and articulated a clear security vision that supported the company's strategic objectives.
  3. 3

    Head of a specialised security function (e.g., Head of Cloud Security, Head of GRC) at a very large enterprise

    8-12 years leading a major security domain

    Skills to master

    • Deep domain expertise, strategic programme management, cross-functional leadership, influencing without direct authority across a vast organisation, developing future leaders within that specialism.

    You're ready to move on when

    • Recognised as an industry expert in their specific security domain (e.g., cloud security architecture for a Fortune 500 company).
    • Successfully delivered multi-year programmes that significantly improved the security posture in their specialism.
    • Managed a large team of highly skilled technical experts and leaders.
    • Demonstrated ability to translate deep technical expertise into strategic recommendations for executive leadership.

15Where this role leads

The long view: This work can lead to a CISO role in a different sector, or to advising on cybersecurity policy at a national or international level.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how VP of Security / CISO is actually changing.

Where it leads

Roles this leads to

The record names a next step, but the catalogue has no page for it yet:

  • Board Member / Non-Executive Director (NED)
  • Chief Executive Officer (CEO) / Chief Operating Officer (COO)

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Managing Risk, worked against VP of Security / CISO.

Managing Risk Entry Level

Applied to your work in VP of Security / CISO

The objective of this unit is to enable learners to recognise potential risks to themselves and others, identifying hazards and vulnerabilities in various situations. Learners will understand and implement strategies to effectively manage risk, minimise harm, and promote safety.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

Start my VP of Security / CISO plan, free
See Your Progress Grow Illustration
VP of Security / CISO
  • Zero Trust Architecture (ZTA)
  • Threat Modeling (STRIDE/PASTA)
  • Cloud Security Posture Management (CSPM)
  • DevSecOps Integration
  • Cloud Incident Response (NIST Framework)
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

16The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

VP of Security / CISO is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

  1. Board Member / Non-Executive Director (NED)

    3-5 years post-CISO role

    Strategic Governance

    • Strategic Advisory Providing high-level strategic counsel across diverse business functions.
    • Executive Mentorship Guiding and developing C-suite executives.
    • Shareholder Advocacy Representing shareholder interests and driving long-term value creation.

  2. Chief Executive Officer (CEO) / Chief Operating Officer (COO)

    5-10 years post-CISO role

    Full Enterprise Leadership

    • Investor Relations (Primary) Leading all investor communications and capital raising efforts.
    • Public Company Leadership Navigating the complexities of leading a publicly traded company (if applicable).
    • Global Operations Management Overseeing complex global operations and supply chains.
    • Innovation Leadership Driving product and service innovation across the enterprise.
Working with AI on the job

Working with AI

Where AI is starting to help

Let's be real, at the CISO level, your time is your most precious asset. You're juggling board presentations, regulatory demands, strategic planning, and crisis management. You can't afford to get bogged down in manual tasks. This is where AI becomes your secret weapon, not just for your team, but for you directly, freeing you up to focus on what truly matters: enterprise risk and strategy.

We're not just talking about automating junior tasks; we're talking about AI as an executive assistant and a strategic co-pilot. You'll use these tools to gain insights faster, communicate more effectively, and make more informed decisions, all while drastically cutting down on the tedious parts of the job.

Automated Incident Triage

Imagine AI-powered SOAR automatically enriching security alerts with threat intelligence, user context, and asset criticality. It'll close out 80% of false positives before your team even sees them, giving you a real-time, high-fidelity view of actual threats, rather than noise. This means faster, more accurate incident oversight for you.

Anomaly & Threat Hunting

Leverage AI/ML models in platforms like Azure Sentinel or AWS GuardDuty to analyse petabytes of log data. These tools identify subtle, anomalous patterns of behaviour that indicate sophisticated attacks – patterns impossible for a human to spot. You'll get proactive alerts on emerging threats, allowing you to direct your teams to hunt down real dangers, not chase ghosts.

CVE & Threat Intel Summarisation

Use an AI assistant to ingest daily threat intelligence feeds and new CVE disclosures from hundreds of sources. It'll provide a concise, prioritised summary of the most relevant threats to our specific tech stack and their potential business impact. No more sifting through endless reports; get the critical insights you need to brief the board in minutes.

Executive & Post-Mortem Drafting

Use generative AI to create the first draft of complex post-mortem reports, executive summaries for the board, or even regulatory responses. It translates highly technical root cause analysis into clear, business-focused language, saving you hours of writing and refining. You'll spend your time on strategic input and validation, not drafting.

Common questions

Common questions

How do you become a VP of Security / CISO?

Common routes in include Director/VP of Security at a larger enterprise (3-5 years in a prior Director/VP role), CISO of a smaller or mid-sized company (5-8 years as a CISO in a smaller organisation) and Head of a specialised security function (e.g., Head of Cloud Security, Head of GRC) at a very large enterprise (8-12 years leading a major security domain). Times vary with prior experience.

Where can a VP of Security / CISO progress to?

This role can lead on to Board Member / Non-Executive Director (NED) (3-5 years post-CISO role) and Chief Executive Officer (CEO) / Chief Operating Officer (COO) (5-10 years post-CISO role), depending on the skills you build.

What new skills matter most for a VP of Security / CISO?

Increasingly, AI-Driven Security & Governance and Quantum-Safe Cryptography Strategy. These are the skills our record of this role lists as growing.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

Read the Zavmo manifesto to understand how you will be taught Meet your tutors

Or try another one

17Where to go from here

Other roles at Level 8

Same depth of qualification, different job. Useful if the work appeals but this particular role does not.

 More jobs in technology and data

Stay in the field you know and move sideways rather than up.
If you leave this industry

The role can move into CISO positions in almost any sector, particularly those with heavy regulation or a large digital footprint, such as financial services, healthcare, defence or technology. Strategic leadership skills carry across sectors.

This role profile is © 2026 Growth Engineering Technologies Ltd. Built from UK occupational standards and regulated qualification data, and written for Zavmo.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my VP of Security / CISO plan, free What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.