Read on Twitter
Continuing on the theme of advancement, I couldn't find any good resources on how to prep for a management role in #cybersecurity so I decided to make one! 
In my last thread, I covered How to Advance Your Career in the #Cybersecurity field https://twitter.com/mikepsecuritee/status/1308769654379347968
I covered How to Advance Your Career in the #Cybersecurity field https://twitter.com/mikepsecuritee/status/1308769654379347968
There are so many good resources on acing the technical interviews for individual contributor positions in cybersecurity and other tech roles, but I couldn’t find anything about landing a Cybersecurity Manager position.
For the sake of this thread, I’m considering a “manager position” to be one that has leadership accountability for a team of people and the HR responsibility to hire/coach/fire them
Becoming a manager in any field typically requires a person to demonstrate a lot of skills that have nothing to do with the team of people they are leading
But at the same time, with tech teams, you have to also demonstrate enough “street cred” to lead a team of more technical people. You have to be able to talk shop, understand enough of the "how", while also filtering and translating direction and strategy outwards and upwards
For the interview, you'll be expected to speak about your principles and approaches one wide range of non-technical topics (i.e., management style, perceived weaknesses, how you motivate and lead teams, etc.)
Be prepared to speak in summaries about:
- How you drive and manage work
- How you engage and convince stakeholders
- How you manage expectations upwards
- How you drive and manage work
- How you engage and convince stakeholders
- How you manage expectations upwards
Be prepared to speak in more depth about:
- What you are passionate about
- What kinds of problems you like to solve
- Where you feel you provide the most value
- How you get support from the people you lead
- What you are passionate about
- What kinds of problems you like to solve
- Where you feel you provide the most value
- How you get support from the people you lead
Be prepared to come with examples of:
- How you reduced risk through strategic planning
- How you made security easier for your end users
- How you enabled the business in a secure way
- How you reduced risk through strategic planning
- How you made security easier for your end users
- How you enabled the business in a secure way
How far you can go in a management career will always be bounded by your ability to convince all the people involved in the best way to navigate to a successful outcome.
A helpful and interesting take on management philosophy: https://randsinrepose.com/archives/the-metronome/?utm_source=animalznewsletter&utm_medium=email&utm_campaign=october142020
My favorite manager-type books that have helped me in my cybersecurity manager roles: https://www.amazon.com/Phoenix-Project-DevOps-Helping-Business/dp/0988262592
Another great book on technology and security leadership: https://www.amazon.com/War-Peace-Business-Leadership-Technology-ebook/dp/B07JZHCVY9/ref=sr_1_1?crid=21Q8YINFPMYEY&dchild=1&keywords=war+and+peace+and+it&qid=1603414959&sprefix=war+and+peace+and+it%2Caps%2C175&sr=8-1
For building great teams and creating powerful messages and strategies that people can get behind: https://www.amazon.com/Leading-Change-New-Preface-Author/dp/1422186431/ref=sr_1_3?crid=SHL35G6PXXLX&dchild=1&keywords=leading+change+kotter&qid=1603415061&sprefix=leading+change%2Caps%2C192&sr=8-3
On building a culture of accountability and freedom: https://www.amazon.com/Powerful-Building-Culture-Freedom-Responsibility/dp/1939714095/ref=sr_1_1?crid=3EWCPVX4LX12V&dchild=1&keywords=powerful+building+a+culture+of+freedom+and+responsibility+mccord&qid=1603415116&sprefix=powerful+buid%2Caps%2C197&sr=8-1
Most of this is stuff you can't fake, at least not for long. You have to have real experience navigating these things and proving yourself, but you'll never get the chance if you don't sell yourself when you have the shot.
Would love to hear any feedback, and if there's enough interest, I'll make this thread into a GitHub repo to make it community-driven and keep it updated.
