This is a warning for professionals with a security background who are considering applying for an Information Security Officer position with this organization. Please be aware that the individuals conducting the interviews are not actual Security Officers. They appear to be GRC consultants. It seems that someone without hands-on security experience has assigned them the “Officer” title, which is misleading.
During my interview, I initially believed I was speaking with true Security Officers and was surprised to discover that interviewers had no technical or practical security experience (I was shocked when I realized that after their feedback). Afterward, I received really negative feedback, which I can understand. My answers reflected how real security operations function, which may have been unfamiliar or even uncomfortable for them. But on the other hand, how would they advise someone if they don't have any security experience and knowledge...
In summary, this position is more aligned with GRC consulting, not an InfoSec Officer role. Those looking for a genuine Information Security Officer position, involving hands-on security work and strategic oversight, should be aware of this distinction before applying. You will just waste your time if you want to become a real Officer and save yourself from negative feedback from irrelevant people.
