What changes have you made to your team’s skill requirements and training to support an expanded security role? How do you avoid duplicating security team capabilities while building necessary competencies?

I am revising a compliance analyst position to include AI and cybersecurity expertise, as managing all aspects is increasingly difficult. Budget constraints require careful planning, and I am seeking a substantial increase to support new tools and training. Industry benchmarking revealed our security spend is below average, and I anticipate needing more resources in the future.

With a small team, balancing skill requirements is challenging. System engineers handle patching and vulnerability management using tools like Qualys and Orca, and monitor our AWS footprint. Training is essential to keep pace with evolving technology and security requirements. Collaboration with the CISO ensures security considerations are integrated into all decisions.