IT Security Career Change Mid-Career?

[DBRENNAN118]

So, I finished my BSBA, and am searching for ways to continue to improve myself and my career. So far, the degree on my resume has not helped too much. I know it's been a short time, but I don't think it is going to matter a whole lot at this point in my career and in my field. My background is in retail security/risk management...doesn't sound like a lucrative field but I have actually done pretty well over the last 20 years. Never really needed a degree, but always wanted it - for myself and more recently to set the example for my kids. Well, it seems like my field is sort of drying up and there are not a lot of opportunities at my level (senior director/VP). Retail is terrible in general, and it seems like most job fields are feeling the pain...all except IT Security. Every time I do a job search on Indeed or Linkedin, I see literally hundreds of open positions for CISO, IT Security Director/VP, etc.

Question: if I started studying (basically from scratch) for a degree in IT Security (or IT, Comp Science, etc.) could a guy in his mid-40s find a way to have a successful career in this field? With more than 15 years of director-level and above experience on my resume, how hard would it be to land a quality mid to high level job in the IT Security field within the next 2-5 years?

I of course understand that it 'depends' on a whole bunch of different factors - but assuming I move quickly and am successful in gaining a degree in this field - could I make this change and have success? I don't expect to walk in with no IT leadership experience and make $250k as the CISO...but would the time, effort, and expense of the degree be worth it at this stage in my life/career?

Welcome everyone's thoughts and insight - especially IT Security folks.

[sanantone]

You should have done the CIS concentration. I also come from a security background. You might have enough experience in two domains to become a CISSP.

Have you looked at jobs with the state and local government and colleges? Colleges might have Clery positions. The government hires security managers and supervisors. Private security companies hire operations and account managers.

[dfrecore]

It is never too late to make a career change. I don't plan on getting back into the job force until my youngest graduates from HS in 6 years, and I will be 52. I have no worries that I won't be able to find a job/career again (after being out for 20 years by that point).

I'm not sure if when you are looking for jobs and putting in the word "security" that's why you're coming up with IT Security? But that doesn't mean that it's what you want to do, it just means that it keeps popping up on your radar. You might take a couple of certs and think "this totally sucks and I can't see why anyone would want to do this!" or "this is awesome, why didn't I look at this years ago!" or anything in between. But I recommend doing more research and trying for a couple of the lower-level, cheaper certs (A+ comes to mind). That will give you an idea of whether or not you want to continue on with it. If you hate it, then you won't have spent a lot of time and money on it.

At that point, if you want to continue, I'm not sure if you should try for a BSIT in Info Security at WGU (or something similar) or just do more certs. Others will have more info on that.

But, I do recommend doing more research in different fields to see if there's an easier way to take the skills you already have and apply them in another way, in an industry that you will enjoy more.

[bjcheung77]

My suggestion for you is to apply to WGU for a Masters in CyberSecurity & Info Assurance, or Hodges Masters Info Systems.
Both programs are competency based degrees, if you work hard at it, should be able to complete it in 1 term for roughly $3000.

Online Master Degree Programs | Information Technology | WGU Masters Degree Online
UPOWER - Self-Paced Learning | Hodges University

For myself, I'm already in IT, but want to grow my skill set within IT, so I'll be taking the BSIT from WGU anyways and I want those Certs.
Moreover, I'm taking the BSBA first to improve my current value/worth and knowledge, so I can move into a higher paying position.

If I complete the BSBA at TESU first, I'll have the majority of the BSIT general ed and electives, etc done, just need to complete certs.
From my estimate, I should be able to complete BSBA this year and BSIT next year (take 1 term of 6 months, max 2 terms).

When they accept more IT Certs, the cost of the degree goes down, I would say to $2950/term for 2 terms, it's $4900.
So, a BSBA for ~$5300 and a BSIT for ~$4900, and the benefit is the extra certifications for job/career purposes.

However, that being said... for myself, since i'm paying out of pocket, i'd rather hit two degrees with that cash flow and will be qualified for Biz & IT.
It all boils down to the individual, I think it will be lengthier in time to complete those as you physically need to take courses, but it's easier.

[sanantone]

In order to get into the WGU program, you either need an IT-related degree, one of the listed certs, or documentation of three years of IT experience. Scroll down to "Get Started."

Online Master

[dfrecore]

My suggestion for you is to apply to WGU for a Masters in CyberSecurity & Info Assurance, or Hodges Masters Info Systems.
Both programs are competency based degrees, if you work hard at it, should be able to complete it in 1 term for roughly $3000.

For someone who has zero IT experience and isn't even sure if they want to get into that industry, this is what they should do??? Yikes!

[sanantone]

He could consider an undergraduate certificate in IT.

[TrailRunr]

I work in IT and in a very senior role.

Is it too late to undo the June graduation? You are going to waste a lot more time and money on a 2nd degree instead of finishing the right one the first time.

If you are going down the management track, it's not totally necessary to get CIS. But you will make your job hunt a lot harder than it needed to be. For the management track, the CISSP is pretty much mandatory and what the HR departments will want to see. Skip the expense of the Sec+ because HR won't be satisfied with that.

Do you have a plan on getting IT computer security job experience, especially with little to no IT coursework such as what would have been needed to get the CIS? I don't see a way to get the job without IT job experience.

[ajs1976]

There are a lot of different roles within Info Sec. Go to https://www.cybrary.it/ and watch some videos to see if it is something that really interests you.

Security+ - Intro to Info Sec
HIPAA - Healthcare related but all companies have to deal with it.
CISA - auditing
CISM - management
CISSP - management
CASP - advanced general, technical

and more.

[DBRENNAN118]

Thanks all. Can always count on the forum for great advice and honest feedback. I will research further based on your responses. I just feel like my specialty is drying up, and IT Security continues to grow. Just trying to maximize my earning potential over the next decade or two! I wouldn't "undo" my BSBA GM, and wouldn't have done CIS concentration - I'm happy with bus administration. I want to add to what I've earned, and it seems like IT Security is potentially a good next step. I'm just not sure if it's too late to build a successful second career from scratch in such a specialized and technical field.

There are some (few) hybrid roles out there that ask for a single leader to oversee traditional (physical, operational) and IT security. Was thinking in that direction first, and then if I grow the IT experience enough, market myself in either direction. I wouldn't dare try a Masters in this area without the undergraduate foundation, but not sure a second BS is right either. I think I will look into certificates as suggested first. After that, we'll see what feels right.

Please keep comments and suggestions coming.