Issue 43  March 5th 2024

Chapter Member Interview: Felicita J Sandoval MSc., CFE by Bryon Singh

Bryon: Tell me about yourself?

Felicita: I worked for over 5 years in the public sector as an investigator and then transitioned into the field of cybersecurity, where I pursued Governance, Risk, and Compliance (GRC). I am currently pursuing my Ph.D. in cybersecurity, focusing on Artificial Intelligence and how to protect clients and people privacy on a global scale.

Bryon: Prior to cybersecurity, did you have an IT background?

Felicita: Cybersecurity was my first transition. I started in the financial industry, then moved to contracting and finance investigation. While working in accounting as a contractor, I had to use Excel and VBA. I started taking online courses and became intrigued by cybersecurity after seeing an advertisement. I completed my master's in cybersecurity and then chose the path to become an auditor.

Bryon: How do you stay updated with the rapidly evolving cybersecurity landscape, and what strategies do you employ to adapt to new challenges?

Felicita: I use different resources. If I'm looking for specific areas in cybersecurity, I look for published articles/papers as trusted, legitimate resources. Additionally, I follow many cybersecurity professionals on LinkedIn. They post a lot of new technologies and trending cybersecurity information and events. Lastly, I stay up-to-date on current events by conducting good old-fashioned Google searches and staying informed about the latest framework updates like NIST.

Bryon: What recent trend in cybersecurity do you believe is significantly impacting the industry, and how are you responding to it in your current role?

Felicita: Artificial intelligence (AI) is the popular trend; all these technologies are evolving so fast. When I was a kid, I used a Walkman; now technology is just moving too fast. When we talk about AI, we are talking about fast-changing technology, and we need to stay on top of it. There's a lot of data out there, and a lot of people's Personally Identifiable Information (PII) at stake. In my current role as a cybersecurity professional in GRC, I am able to assist in safeguarding data privacy. I make sure the right policies for AI use are in place, bring insights so my company can stay on top of AI trends, vendor management, and preserve our clients' trust.

Bryon: What's the most complex cyber threat you've encountered, and what steps did you take to mitigate it? What lessons were learned?

Felicita: In the past, companies had to deal with cyber threats like Log4j and the Citrix ADC vulnerabilities. Usually, the steps I would take involve mitigation measures provided by the breached company and internally derived steps like patching systems and reviewing logs. Ensuring client trust is crucial; I have to be available to answer any questions they may have, such as if their data has been compromised, and keep communication open.

Bryon: What tips can you give cybersecurity professionals to survive in this field?

Felicita: First, you have to believe in yourself. It's going to get tough out there, and you will be around so many people who are smarter than you, which may be discouraging. It's important to know the role you want to pursue. I've had people come to me with three different areas of interest, but it's very difficult to focus on all three. If you're interested in penetration testing, start by examining the job description to understand the requirements. Then, supplement your general schooling with additional self-education to deepen your understanding of the field. Lastly, join groups like ISC2 and other similar resources.

linkedin.com  

JuMPstart Mentorship Program (JuMP)

Dear Members,

As we step into March, the JuMP Mentorship Program continues to thrive thanks to our flexible, month-to-month signup approach. Here are the latest updates and what's on the horizon.

Program Highlights:

Our month-to-month signup sheet has been a game-changer, offering unparalleled flexibility for mentors and mentees to engage according to their schedules.

Get Involved:

Interested in mentoring? Join our dynamic roster by signing up here.
Your feedback shapes our program. Reach out at mentoring@isc2chapternj.org.

Thank you for your active participation. Together, we continue to make a significant impact in the cybersecurity community in New Jersey and beyond!

Warm regards,
Matthew Lang and The Mentorship Committee

google.com