CISO Insiders with Chad Hicks | CISO at MercuryGate International | Episode 83 · CISO insiders summary

Key takeaways

First impressions matter; understanding organization dynamics is crucial for success.
For those entering cybersecurity, gaining foundational IT knowledge and experience is vital.
The CISO role has evolved into a key business leadership position focused on risk management.
More tools are not the answer; the focus should be on skilled personnel and effective processes.
Proactive engagement in managing threats and compliance is essential for today's CISOs.

Summary

Guest Introduction and Professional Journey

In this episode, host Chris interviews Chad Hicks, the CISO at MercuryGate International. Chad shares his journey from starting in IT as a CIS admin to becoming the CISO, discussing his career trajectory and the challenges he faced along the way. He highlights the importance of understanding the organizational culture and the significance of first impressions in a professional setting.

Advice and Insights for Newcomers in Cybersecurity

Chad offers valuable advice for individuals looking to enter the cybersecurity field, emphasizing the need for hard work and a well-rounded understanding of IT and the business. He recalls mentoring students and underscores that cybersecurity demands practical experience, stating, "You can't fake your way into cybersecurity; you have to put in the work." He believes gaining entry-level IT roles is essential for aspiring cybersecurity professionals.

The Evolving Role of the CISO

Chad explains the transformation of the CISO role over the past 15 years, detailing how increased cyber threats and regulatory changes have amplified the importance of the position. He discusses how a CISO is now perceived as a crucial business leader focused on risk management while highlighting the collaborative nature of managing cybersecurity effectively.

Common Myths and Real Concerns in Cybersecurity

During the conversation, Chad debunks the myth that the industry needs more tools, instead arguing that organizations require more skilled personnel, effective processes, and time to leverage existing tools adequately. He shares insights on prevalent industry concerns such as phishing, ransomware, and third-party risks, warning about personal liabilities and the importance of being proactive in preventing incidents.

Looking Ahead: The Future of Cybersecurity

Chad shares his thoughts on future trends in cybersecurity, notably the increasing relevance of AI technologies and how they are shaping the industry. He articulates the expectation that businesses will derive greater efficiency from existing tools instead of constantly adding new technologies, stressing the importance of innovation in existing operational processes.

Show notes

🧠 In this episode of CISO Insiders, we welcome Chad Hicks, the CISO at MercuryGate International.

Chad Hicks tackles some of the trending issues and challenges in the cybersecurity industry while giving crucial advice to newcomers in the industry. Chad Hicks also discusses in detail the role of the CISO in an organization and the evolution of the industry in the past 15 years.

👇🏼 This special episode will tackle the following topics:

Giving advice and setting expectations to newcomers and individuals who want to pursue a career in the cybersecurity industry.

Key insights and major cultural shifts within the realm of cybersecurity.

Dispelling myths revolving around cybersecurity.

Tackling pressing issues in the world of governance, response, and compliance.

Highlights:

🔥 ”It’s amazing how quickly you can collaboratively resolve things if you treat cybersecurity as a team sport.”

🔥 “The majority of threats that we see are pretty defined methods. We have enough tools to detect threat vectors. We don’t need more tools and technologies; we need more people and time.”

🔥 “You can’t fake your way into cybersecurity; you have to put in the work. Since cybersecurity touches every aspect of the business, you have to be well-rounded.”

⏱️ Timestamps:

00:36 Guest Introduction and Professional Journey

01:32 Icebreaker questions

03:13 Is there one thing you wish you had known before starting your career?

04:15 Biggest failure and key learnings

05:36 Biggest accomplishments and achievements

06:53 How did you become a CISO through your professional journey?

09:53 What is your advice to newcomers and anyone wanting to pursue a cybersecurity career?

11:21 What are your views on the CISO role in the IT organization?

13:46 What were the best resources that have helped you through your career?

15:59 What is one myth about your industry that you want to debunk?

18:49 What are the main concerns that CISOs have right now?

20:45 Are there any specific areas CISOs should focus on?

22:29 What are the most crucial skills a CISO should have?

23:50 How did the CISO role change in the past 15 - 20 years?

25:19 Will the CISO role grow bigger in the next few years?

27:47 What do you think we’ll see in the cybersecurity industry next?

30:47 What would you define as “innovation” in this industry?

33:25 What’s the best way for vendors to reach out to you?

35:45 Are there any individuals in the industry that you look up to?

37:40 What’s the best way to reach out to you?

38:48 Final question and closing comments - If money was not an issue, what would you do with your life?

📢 Get ahead in your professional journey and gain valuable cybersecurity insights.

Follow GRSee Consulting and GRSee University on LinkedIn to stay updated.

#cybersecurity #podcast #careeradvice #cybersecurityawareness #cybersecuritycommunity #cybersecurity #cybersecuritypodcast #cybersecuritysolutions #cybersecurityjobmarket #jobmarket #recruitment #specialepisode

CISO Insiders with Chad Hicks | CISO at MercuryGate International | Episode 83