Cyber Defense eMagazine July Edition for 2022

Recruitment and retention
A far more effective strategy is to refine the recruitment drive according to the market, seek to adapt the
employment package to meet candidate needs, and to prioritise staff retention. We’ve already covered
the changing skillsets and the need to think beyond certifications and experience, but what are candidates
looking for and how can we improve retention?
Funnily enough, the answer to both those questions is the same because, salary aside, the top reason
for changing jobs given by candidates is career progression. It’s a topic seldom dealt with at interview
and often neglected during employment reviews, as evidenced in the ISSA survey that found 82% were
dissatisfied because there was insufficient capacity within their role to develop their skills.
It’s also one of the areas the security sector really struggles with, which is why the Cyber Pathways
initiative, currently being thrashed out by the UK Cyber Security Council, is to be welcomed. The
framework aims to align particular skillsets with job roles to provide employees with clear career
objectives but it will also allow organisations to create career development programs and make it much
easier to progress through the ranks. The pathways are currently being developed following a
consultation earlier this year but expectations are these will be in place by 2025.
In the meantime, employers will need to adopt a more expansive approach and to widen their remit so
that they can harness raw talent. It’s worth remembering that many of the industry veterans we have
today started out in other sectors. They’re self-starters who often taught themselves and were able to
climb the ladder due to their zeal and determination. It’s that willingness to learn and natural aptitude that
employers need to once again tap into to both fill the skills gap and protect their defences.
About the Author
Jamal Elmellas is Chief Operating Officer for Focus-on-Security, the
cyber security recruitment agency, where he oversees selection and
recruitment services. He previously founded and was CTO of a
successful security consultancy where he delivered secure ICT
services for government and private sector organisations. Jamal has
almost 20 years’ experience in the field and is an ex CLAS consultant,
Cisco and Checkpoint certified practitioner. Jamal can be reached at
and at the company website
First Name can be reached online at Jamal.Elmellas@focus-onsecurity.org
and at our company website https://focus-on-security.org
Cyber Defense eMagazine – July 2022 Edition 57
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.