Actually, I work downtown. Or worked. I'm glad to say that I'm moving on. While I don't regret the time spent in my current location, the job did not work out. My co-worker said it best when she was cornered by our Vice President on why I'm leaving: "Expectations were not met." Clearly, I learned a lot while I've been here, it has been a rewarding experience. And, I'd do it again, because you learn from every opportunity. But, I could not see myself here in any number of years.
So, I'm moving on. I've taken a position where I will be building out a security department for a company. Basically, I'm on the ground floor. They have a bunch of controls in place, but very disparate, and not centrally managed. And, I'm sure when I start gap analysis, I'll find a whole lot missing. But that's ok, as there will be opportunity to grow and put a stamp on things. It will good to see the company move in a positive security direction.
Will there be challenges? I expect it. I'm sure that there will be lots of pain implementing some of the controls. And, while I know that there is (some) management buy-in (heck, they created this position) I'm sure there will be tons of operational pushback.
I hope that this means I will be posting more. Certainly, I will not be posting specifics. But, I will chronicle the process of building out security in the enterprise. I'll tell of what works and what does not. I'll post some reviews of success, and I'm sure there will be plenty of lessons learned. Finally, you will probably see posts looking for advice or recommendations.