InfoSec Jobs

We all know that a lot of people lost their jobs because of the difficult U.S. economic conditions. I got interested in searching for a list of jobs looking for InfoSec certified professionals and checked 3 of the well-known sites for job hunting. I used the InfoSec certification abbreviations as a search string and did not specify any U.S. city or zip code and came up the following numbers.

Please note though that this is just a count of the strings on the websites so this cannot represent the actual number of job openings. A company can post their job opening on the 3 websites below and it will be counted as 3 (one for each site below) instead of 1. Also, some jobs list several certifications on their posting, e.g. CISSP, CISA, CEH certified, so an open position with this criteria will have a count for each of the InfoSec certification listed, i.e. 1 for CISSP, 1 for CISA and 1 for CEH, even though the open position is only 1.

CareerBuilder.com
CCNA - 755
CISA - 468
CISSP - 440
CISM - 108
CEH - 21
GSEC - 20
SSCP - 19

DICE.com
CCNA - 868
CISSP - 796
CISA - 279
CISM - 163
GSEC - 48
SSCP - 47
CEH - 34

Monster.com
CCNA - 861
CISSP - 768
CISA - 624
CISM - 163
SSCP - 66
GSEC - 55
CEH - 27

By the way, the job search results for CareerBuilder and Dice websites only listed the jobs posted within the last 30 days while Monster showed jobs for the last 60 days. I will try to create another count in about 2 weeks or so. Please let me know if you want me to add other InfoSec certifications or other job hunting websites on the list.

ISACA e-Symposium

This time it's for ISACA members.

ISACA is having an e-Symposium about Secure Web Access on December 16, 2008 at 11:00am EST / 4:00pm UTC. To register, please visit http://isaca.brighttalk.com.

Similar to ISC2's e-Symposium, you also have the opportunity to gain 3 CPE credits. Look for the CPE quiz link.

ISC2 e-Symposium

Calling all ISC2 members.

ISC2 is having an e-Symposium about Application Security on December 9, 2008 at 1:30pm EST / 6:30pm GMT/UTC. To register, please visit http://isc2.brighttalk.com.

You also have the opportunity to gain 3 CPE credits. Look for the CPE quiz link. I believe this will be available once all the presentations are completed. The e-Symposium is being recorded and will be available on the website above after 72 hours of the scheduled date.

SC World Congress 2008

SC Magazine is having it's SC World Congress 2008 on December 9-10 at the Javits Center in New York City. This is a must attend Conference and Expo for IT Security Professionals.

The Expo access is Free if you register online ($50 onsite registration) and conference fees are detailed on the registration website. Click here to register.

For more details about this Conference and Expo, please visit:
http://www.scmagazineus.com/SC-World-Congress/section/381/

Friendly reminder for CISA and CISM exam takers

The scheduled ISACA exam for CISA (Certified Information Systems Auditor) and CISM (Certified Information Security Manager) is on December 13, 2008 (Saturday).

• Candidate should report at 7:30 AM on the day of the exam
• Oral instruction starts at 8:30 AM. No candidate will be admitted once the Chief Examiner begins reading the Oral Instructions.
• Exam start/end time: 9:00 AM to 1:00 PM (13:00) Start time may vary slightly due to the onsite registration process
  

The registration for this scheduled exam is now closed. The next scheduled exam is on June 13, 2009.

Please do not forget to bring the following on the exam day:

• Admission ticket (you should have received this by now via mail or email)
• Valid Photo Identification (driver's license, passport or government ID). ID must be original and current.
• Several sharpened No. 2 pencils
• Eraser
  

Items not allowed at the test center:

• Any communication device (i.e., cell phone, PDA, Blackberry, etc.)

For more information about CISA, CISM or the exam, please visit ISACA's website at http://www.isaca.org

CPE opportunities

It's been a while since I posted on this blog and I apologize for that. I have a couple of CPE opportunies to list here. I found these out when I started studying for my CISA certification. The first one you can check is the ISACA's (Information Systems Audit and Control Association) online conferences. This is similar to what I posted earlier with ISC2. Visit this link for more details -> http://isaca.brighttalk.com/

If you are a member of ISACA and you are receiving their magazine Information Systems Control Journal, you can get 1 CPE credit by answering questions on http://www.isaca.org/cpequiz/. You must get a passing score or 75 percent or higher to get the CPE credit.

National Cubicle Day

I really like the movie Office Space and in honor of the National Cubicle Day, follow the link for 15 Quotable lines from the movie.

http://www.ew.com/ew/gallery/0,,20195463,00.html

CPE credits

For those who are looking for CPE credits, you can visit ISC2's e-Symposium website - http://isc2.brighttalk.com/. I have viewed a couple of recorded events and they are very informative.

If you have any of the ISC2's certification and you passed the quiz after attending/viewing the event, the CPE credits can be automatically added to your certification. For more information, click here.

Earth Day

Today is Earth Day. Let us all work together and do our part in saving our planet.

Try the 2008 Earth day challenge below.
http://www.earthlab.com/signupprofile/ecp.htm?ver=9

Additional information on how we can save the Earth.
http://wecansolveit.org/
http://www.epa.gov/earthday/
http://earth911.org/
http://www.plantabillion.org/

Recycle your old phones:
http://www.epa.gov/cellphones/cell-recycling-locations.htm

CISSP

The first InfoSec certification that I am posting is the Certified Information Systems Security Professional or CISSP. This certification is governed by (ISC)2 (short for International Information Systems Security Certification Consortium). The information below is only a summary of the requirements. For complete details, please visit the (ISC)2 website.

Certification Description: The certification is for experienced professionals who have direct information systems (IS) security-related work. Click here for details.

Requirements to be able to take the exam: Click here for details.
- Subscribe to the (ISC)² Code of Ethics
- Must have at least five years of direct work experience in two or more of the ten domains of the Common Body of Knowledge (CBK).

Information Systems Security Common Body of Knowledge (CBK):
- Access Control
- Application Security
- Business Continuity and Disaster Recovery Planning
- Cryptography
- Information Security and Risk Management
- Legal, Regulations, Compliance and Investigations
- Operations Security
- Physical Security
- Security Architecture and Design
- Telecommunications and Network Security

Examination Details:
- Fee: The CISSP exam costs $499 (early registration) or $599 (standard registration). The fees may change so please check this page for the latest information.
- Schedules (including seminar) and locations: Click here for details.

Maintenance and Recertification:
- 120 Continuing Professional Education (CPE) must be earned every three years.
- An Annual Maintenance Fee of $85

Starting April 30, 2008, a minimum of 20 CPEs should be posted every year (120 CPE per 3 years still required). The Annual Maintenance Fee (US$85) should still be paid each year.

Concentrations: Click here for details.
ISSAP – Concentration in Architecture
ISSEP – Concentration in Engineering
ISSMP – Concentration in Management

Exams for this certification are held frequently. Good luck to all of those taking the exam!

Good day!!!

It is almost summer again here in the U.S. and most of us will be travelling around (even though gas prices are so expensive nowadays). I am starting a blog about my summer trips and future trips after that. Since this blog is about Information Security Certifications, I will be posting pictures of me with any of my CISSP books below and also my Office Space T-shirt.

I will also try to post information about InfoSec Certifications like CISSP, SSCP, CISA, CISM, GIAC, Security+, etc. This Information Technology field has been growing rapidly and it is difficult to keep up with the changes and I hope this blog will be able to point you to the right places where to get more information about these certifications.

I hope everybody is having a great day!!!