To get auditing experience you could take an Internal Auditor Course
relating to ISO9000. The internal audits in your future company could bring
you closer in touch with business operations and improve your people
skills. Auditors often deal with top management.

To bring together your technical and your auditing experience, take the
CISA exams as recommended below.



                                                                                       
                                  
                    Yinal Ozkan                                                        
                                  
                    <YOzkan@humanapplica       To:     
[EMAIL PROTECTED]                                 
                    tions.com>                 cc:                                     
                                  
                                               Subject:     RE: Which skills do I need 
for a Security Engineer /         
                    04/06/2002 03:08 AM         Consultant?      How to get a job as 
Security Engineer?                  
                                                                                       
                                  
                                                                                       
                                  




Dear Frank,
Being an engineer and being an IT Auditor are different. IMHO an IT auditor
should be much more close to the business side of the whole security
process
and must have a clear understanding of the business itself. I believe the
headhunter is right that you are too young to take the responsibility for
an
Auditor. Experience supercedes skills when auditing, so the better question
would "which experience?" instead of "which skills?". Your skills and
experience would be a base but would not be enough if you didn't gain audit
and industry specific experience.
I recommend you to take CISSP and CISA exams if you really want to be at
the
audit side. GIAC certifications are good on the engineering side.
Certification will help you to eliminate the headhunter screenings so that
you can interview the real people who understand what your skills are.
No idea about Switzerland but direct connections work. Take a look at local
events, take responsibility in the organization (organizers love free help)
and give a training session/presentation , meet people and shoot..

good luck..
yinal.

-----Original Message-----
From: Frank Bauer [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 04, 2002 1:10 PM
To: [EMAIL PROTECTED]
Subject: Which skills do I need for a Security Engineer / Consultant?
How to get a job as Security Engineer?


Dear all,

I'm a 23 year old System Engineer with good Skills in networking (Cisco
Certified Dial Drake), good Skills in Linux and Sun Solaris. I've also good
experience in Network and Host-Security, PKI, ..., but with no Certificate.

I had many projects in networking. The branches of my customers are
numerous, from banks over ISP's till customers in industries.

Now I'm searching a job as Security Engineer / Consultant in Switzerland.
My preferred job ist IT Auditor, but a Headhunter has mean that I'm too
young to take the responsibility for this work.

Has anyone a tip for me, how is the best way to get a job in the
Security-Business in Switzerland?

Sorry for the x-posting, but it's urgent...

Many thanks

Frank



Reply via email to