CISOs rethink hiring to emphasize skills over degrees and experience

That mix of talent produced a valuable range of experiences and skills, France found. Seeking to build on that dynamic, France decided to remove the requirement for a college degree for jobs in his department, and removed certification requirements for some positions as well.

“Previously a college degree was what we used as an indicator of quality, but now we’re accepting many more indicators of quality, not just a degree. Because while a degree is an indicator, it is not the only indicator and, arguably, it is not the best indicator,” France says.

Under France, ISC2’s security department looks for candidates who can solve problems, demonstrate good communication capabilities, and show curiosity. It also asks candidates to prove they’re up to snuff on the specific technical tasks they’ll be performing if they land the job.