Austin, English Veteran Awards 2023 finalist, reflects on the key ingredients for success in his role and why adapting to civilian life as a veteran is only the beginning of your journey.
As an information assurance manager, I look out for every insecure and vulnerable avenue that puts an organisation’s data in harm’s way. A common misconception is that information security is all about implementing technology to safeguard data and prevent cyber risks. People, policies, and processes are equally important. It’s an intricate balance of preventing data from falling into the wrong hands while also ensuring information flows efficiently throughout the organisation and externally with service users, suppliers and agencies. I’m responsible for carrying out a deep audit of potential physical and online risks and threats before proposing reasonable and actionable steps. Good information assurance isn’t about driving an approach that is inaccessible or restrictive – the objective should be to build a security fort, not a prison!
The biggest challenge often facing our clients is compliance and building an effective information security culture. Employee awareness isn’t just about mandatory online training – it needs to be carefully curated by building a shared understanding and responsibility, nurturing a collective mindset in the organisation that embeds security at the heart of behaviour. People are the greatest line of defence for information assurance, yet unfortunately there are countless cases of cyber criminals gaining vital information through simple social engineering methods. The online branch of a Las Vegas casino was held to ransom for $50 million by a threat actor simply calling the service desk impersonating a member of staff and gaining vital clues to more easily access that network. Building the right attitudes and practices is one of the best things an organisation can do to fortify their security. One of the most effective tools we deployed at 6point6 is a dashboard that sends out simulated phishing emails to our employees. This acts as an effective monitoring system and helps pinpoint tailored training needs depending on each individual’s level of engagement with a potential threat.
Information assurance professionals need more than technical skills, which can be learnt and developed over time. It’s about having the right attitude. Those much-needed soft skills like listening, being curious and effectively engaging your colleagues and clients are the ‘WOW’ factor that we look for.
Two adjectives that come to mind to describe my day: fast-moving and multifaceted. In information assurance, you’re dealing with threats that are constantly evolving and the need to stay ahead of the curve is business critical. For example, I worked on a project where we fortified and delivered an online government platform to enable the secure upload of sensitive, personal information for secure identity verification. The solution had to be robust, rigorously assessed and assured, with enhanced data protection and system security. We worked against the clock to secure and deliver the platform in only three days – in a process that typically takes over three weeks. The most fulfilling part is that 200 million personal records of people in vulnerable positions will now be managed more quickly, simply and securely, safeguarded against potential extraordinary threats.
The other significant part of my job is building the right support for my team. I’m passionate about developing a close-knit culture that builds trust, makes us more efficient in delivering against tight schedules and creates a collective sense of ownership. What I value the most at 6point6 is being empowered to shape and drive our supportive work environment. Around two years ago, I helped set up the mutual mentoring programme. As a result, over 50 colleagues have benefited from diverse perspectives and two-way learning, with a new cohort of the scheme launching later this year.
The inspiration for co-leading the programme came from my own direct experience with mentoring. Mentorship was a lifeline for me when I was navigating my transition into a corporate role after 14 years of military service. Resettlement comes with unique difficulties and challenges, but what helped me bridge the gap was learning from those around me and seeking different perspectives. I learnt valuable lessons about building diverse teams and drawing on our collective strengths. We can all learn from each other – whether someone has been in their career for 30 years or has just left university. Mutual mentoring is about developing a trusting collaboration of equals and promoting alternate ways of thinking through the exchange of ideas and perspectives.
Having diverse perspectives around the table leads to a more effective information security ecosystem. Ensuring all voices are heard is how we create innovative solutions to meet the demands of new and emerging security challenges.
My successful transition into corporate life is the first thing that comes to mind. I joined the Army at 16 and became a sergeant at 27, leading teams of up to 40 military personnel. Service before self is what I stand for, which for me today means learning to connect with people and creating an environment where everyone can rise to their full potential.
My advice to anyone moving to civilian life is to talk to veterans who made that transition. Armed forces employment charities like TechVets are there to help veterans, service leavers, reservists and their families consider a tech career. Having volunteered with TechVets and mentored ex-forces personnel on their CVs and job interviews, the best recommendation I can make is: don’t be put off by not having a tech background or a relevant degree. Approach companies like 6point6 who want to recruit outside of the norm. Most importantly, think about how you hone your skill set and become entrepreneurial rather than just simply adapting to corporate life.
Information assurance is the protective shell covering every operational aspect of an organisation. My work has importance and impact – I’m at the forefront of an organisation’s defence against cyber threats, ensuring the security, integrity and availability of data and information systems, and playing a vital role in safeguarding my clients’ most valuable assets. For me, what makes a career in information assurance stand out is how we work with different teams across cyber security, delivery and solution architecture. Collaborative skills and effective communication is a must, along with a hunger for continuous growth and learning. Cyber threats are ever-evolving, and we are the enablers and problem solvers, working in-step with our clients to navigate complex challenges at pace.