How can I move from a security policy based role into a technical security role?
This is not an easy move to make, and one which gets increasingly difficult with the more years experience you have in security, however, it can be done. The best first step is to take a professional qualification that covers a wide range of areas of information security we would suggest an MSc in Information Security or the CISSP. This will give you a good theoretical grounding of other areas of information security that you may not have practical experience of and demonstrate this to potential employers. The smoothest way to make the transition is to find out if your current employer is willing and able to offer you a wider remit. This way you can split your time undertaking a mix of hands-off and hands-on security tasks and gradually make the move without taking a drop in salary or status. If you cannot or do not wish to remain with your current employer, you can check the market for a role that will offer a mix of technical and non-technical security work, which is more likely to b
