Presentation Slides from Ty Sbano's Presentation at BSides Las Vegas 2019 in the Hire Ground Track. Are you working in a mature enterprise security team, but have been exploring the idea of transitioning into a security leadership role in a startup or smaller, less mature organization? Tech debt is a real issue in any role, but perhaps instead moving into a new role in a new organization where the perception is that the grass is greener, you want to truly try your hand at a true evergreen environment where you build the program from scratch at a startup. Specifically, are you thinking about making a career change as a security specific domain expert to moving into a startup role where you may develop domains within InfoSec, Compliance, Privacy, and more. While it may be intimidating, it’s not impossible, come learn about specific examples of how to apply enterprise security lessons to build a security program at a tech startup.

1. Lessons to Level Up from
Fortune 100 to Tech Startup

2. Ty Sbano is an Information Security leader with 13 years of experience, mainly in Financial Technology
organizations. Currently serving as Cloud Chief Information Security Officer at Sisense and advising for
Watchertower.ai and Spherical Data. Previously Ty focused on leading application, product, and
information security programs at >
whoami
Education
Penn State University
B.S. Information Science and
Technology
Norwich University
M.S. Information Assurance
Certifications
CISSP, SSCP, CEH, CCSK, CPT

3. Ikigai 生き甲斐

4. Planning For the Move
📋 Development Action Plan
🤑 Financial Buffer
👥 Your Support Network

5. Which Startup?
📊 Vertical
🤑 Interviewing
📉 Early vs. Late Stage

8. Culture of Security
💹 Business Model
🤑 Sales Enablement
👿 Contextual Threat Model

9. Education at (small) Scale
More Coaching,
Less CBTS
Presence,
Over Policy
Be Real,
Be Practical

10. Staffing
🤑 Hiring Limitations
💸 Pay Now or Pay Later
🚻 Employee Lifecycle

11. IPO or BUST
🔂 Acquisition
💰 Initial Public Offering (IPO)
🏯 ¡Threat Model Changes!

12. NOW
WHAT?

13. Takeaways
☑️ Have a well defined Plan of Attack
🤑 Be Agile, Wear Many Hats
🏆 Culture of Enablement (Users, Sales, etc.)

14. Linkedin - https://www.linkedin.com/in/tysbano/
Articles - https://techbeacon.com/contributors/ty-sbano
Website - http://www.tysbano.com
Twitter - @tysbano
Instagram - https://www.instagram.com/ty_sbano
HitMeUp