Finance Industry Career Search Panel
Where
Day 2 Stream 2
BSides Las Vegas
Duration
57 min
Panelists share how they built security careers in finance, learned its regulations, and what newcomers should expect.
Summary
A panel of finance-sector security professionals, guided by a Higher Ground host, describes how each of them reached their current role. Their routes ran through programming, penetration testing, Big Four consulting, internal audit and application security, with moves in and out of banking, consulting and cloud. They describe a career as a set of lateral moves rather than a straight ladder, with each step teaching something useful.
The discussion then turns to regulation. Early in their careers requirements were sparse, but they grew after the mid-2000s with card-industry standards, the 2008 financial crisis and later international regimes. Learning the rules was usually done as needed, on the job. The panelists point to the sector's broad vocabulary of risk, its conservative and sometimes confrontational culture, and the need to translate technical findings for auditors and executives. Business understanding, relationship building and delivering unwelcome news came up repeatedly as core skills.
For advancement, the speakers advised stretching beyond comfort zones, building relationships outside one's own team, and separating mentors from sponsors. They also suggested being bold about taking on roles, self-promotion without boasting, and negotiating pay firmly. The takeaway for practitioners is that a technical background transfers well into finance, and that the sector rewards people who can connect security work to business objectives.
Related talks
Talks·54 min
David Young
Describes day-to-day security work on internal teams and as a consultant, from scoping to reporting.
Day 2 Stream 2·58 min
Mike Murray · Suchi Pahi
Two healthcare security practitioners describe how they entered the field and what skills help newcomers succeed there.


