Cyber Security Manager — career path
StationX Advanced
From practitioner to the person who runs the programme: the technical baseline, then governance, risk and compliance, then CISSP and CISM — the two certifications management adverts ask for.
The path
Step 1 — Security foundation
Managers are hired from practitioners; this is the practitioner baseline.
follows a certification path
Learn
- PathFollow the CompTIA Security+ (SY0-701) path — the baseline; the job assumes you have it
Step 2 — Governance, risk and compliance
The language of the board: frameworks, risk registers, policy.
2 courses
Learn
- CourseGovernance, Risk and Compliance (GRC) 🔒 StationX Unlimited
11 sections · 50 lectures
- Training Overview 2
- Introduction 3
- Governance 6
- Risk Management 6
- Compliance 4
- Internal Controls 13
- Audit 4
- Cybersecurity 4
- Emerging Trends in GRC 4
- Conclusion 3
- Audio Version of Training 1
- CourseMastering Governance, Risk, and Compliance (GRC): A Handbook 🔒 StationX Unlimited
15 sections · 72 lectures
- Course Overview 2
- Introduction 6
- Module 1 - What is Governance Risk and Compliance - Quite Literally 9
- Module 2 - The Three Lines of Defense 7
- Module 3-Step 1 Information Gathering-Understand the organisation risk universe 11
- Module 4 - Step 2: Drafting inherent risks 14
- Module 5 - Step 3: Mapping the Lines of Defense - Roles and Responsibilities 4
- Module 6 - Step 4: Existing Controls Environment 5
- Module 7 - Step 5: Residual Risk 2
- Module 8 - Follow Through 2
- Module 9 - Bringing it all together 1
- Module 10 - GRC Tools 2
- Module 11 - IT Auditing: The Third Line of Defense 3
- Module 12 - Course Conclusion 3
- Audio Version of Training 1
Step 3 — Run service and project delivery
The management method the rest of IT already speaks.
follows a certification path
Learn
- PathFollow the ITIL 4 Foundation path — service management, the operating model security sits inside
Step 4 — The senior technical certification
Credibility with the engineers you will lead.
follows a certification path
Learn
- PathFollow the CISSP — Certified Information Systems Security Professional path — the certification management adverts list first
Step 5 — The management certification
The credential that says you run programmes, not just controls.
follows a certification path
Learn
- PathFollow the CISM — Certified Information Security Manager path — governance, risk, programme development and incident management
Where this leads
- CRISC — Certified in Risk and Information Systems Control — Advanced
- CISA — Certified Information Systems Auditor — Advanced
- CCSP — Certified Cloud Security Professional — Advanced
Advanced · after the job
The AI-Driven Cyber Security Manager
Senior roles are going to the people who can direct AI to build security solutions. When you're working in the role and ready for that step, the AI Master's Program is where it's taught — an advanced, application-only programme.
See the AI Master's Program →Application-only. A separate programme for when you're ready.