Career Overlap Transition record
RecordMove

Data protection officer to chief ICT security officer

A data protection officer already meets 24% of what the chief ICT security officer role asks for. The move turns on 35 required skills not yet in the profile.

Fig. 1 · Skill transfer ESCO v1.2.1 · directional
From data protection officer
24 % overlap
Distant match
To chief ICT security officer
18 You already bring
35 Still to learn
81 Skills in the target role2
Learning distance A rebuild

84.3/ 100

1 How much of what a chief ICT security officer is expected to do is already part of a data protection officer’s work. Directional: the figure for the reverse move differs, because moving into a speciality is not the same problem as moving out of one. 2 Every skill the chief ICT security officer role is recorded as needing, required and optional together. What these numbers mean.

Why

Why this move works

A chief ICT security officer role treats 12 of its required skills as things a data protection officer already does. You would walk in with these on day one.

  • ICT security legislation
  • ICT security standards
  • cyber security
  • data protection
  • develop information security strategy
  • ensure compliance with legal requirements

What stands in the way is 35 required skills the profile does not yet cover. Table 3 groups them; Table 4 says which to take first.

Table 2

Table 2 · What you already bring

Of the 18 skills that carry over, these are the ones fewest other occupations ask for. A chief ICT security officer role needs them, and most people applying for one will not have them already. This is the part of a data protection officer background worth leading with.

Skill the target role also needs Area
  • already held conduct impact evaluation of ICT processes on business information skills
  • already held manage digital identity core skills and competences
  • already held ensure information privacy assisting and caring
  • already held manage keys for data protection working with computers
  • already held develop information security strategy assisting and caring
  • already held internal risk management policy business, administration and law

All 18 carried skills, including the 12 the chief ICT security officer role treats as required.

Table 3

Table 3 · What you may need to learn

The 63 missing skills fall into 11 areas of the ESCO skill hierarchy, numbered in the order worth working in. Areas carrying the most required skills come first, and inside each one the required skills sit above the optional ones. Nothing here is a verdict on you: it is a list of what this particular job asks for that your current one does not.

Skill to pick up Tier
01 information and communication technologies (icts) 6 required, 13 supplementary
  • still to learn ICT network security risks required
  • still to learn ICT process quality models required
  • still to learn attack vectors required
  • still to learn decision support systems required
  • still to learn ethical hacking principles required
  • still to learn assessment of risks and threats required
  • optional, not held ICT encryption optional
  • optional, not held ICT recovery techniques optional
  • optional, not held ICT system user requirements optional
  • optional, not held Internet of Things optional
  • optional, not held cloud monitoring and reporting optional
  • optional, not held cloud security and compliance optional
  • optional, not held cloud technologies optional
  • optional, not held computer forensics optional
  • optional, not held internet governance optional
  • optional, not held software anomalies optional
  • optional, not held web application security threats optional
  • optional, not held World Wide Web Consortium standards optional
  • optional, not held computer programming optional
02 information skills 6 required, 2 supplementary
  • still to learn advice on security risk management required
  • still to learn identify ICT security risks required
  • still to learn implement ICT risk management required
  • still to learn forecast organisational risks required
  • still to learn monitor developments in field of expertise required
  • still to learn monitor technology trends required
  • optional, not held execute ICT audits optional
  • optional, not held implement cloud security and compliance optional
03 communication, collaboration and creativity 5 required, 2 supplementary
  • still to learn implement corporate governance required
  • still to learn communicate with stakeholders required
  • still to learn educate on data confidentiality required
  • still to learn engage with stakeholders required
  • still to learn ensure cross-department cooperation required
  • optional, not held create solutions to problems optional
  • optional, not held use different communication channels optional
04 working with computers 4 required, 4 supplementary
  • still to learn ICT safety required
  • still to learn manage IT security compliances required
  • still to learn manage system security required
  • still to learn utilise decision support system required
  • optional, not held implement a firewall optional
  • optional, not held implement a virtual private network optional
  • optional, not held implement anti-virus software optional
  • optional, not held optimise choice of ICT solution optional
05 management skills 4 required, 3 supplementary
  • still to learn establish an ICT security prevention plan required
  • still to learn lead disaster recovery exercises required
  • still to learn maintain plan for continuity of operations required
  • still to learn manage disaster recovery plans required
  • optional, not held assess ICT knowledge optional
  • optional, not held coordinate technological activities optional
  • optional, not held manage staff optional
06 business, administration and law 4 required
  • still to learn ICT project management required
  • still to learn ICT project management methodologies required
  • still to learn organisational resilience required
  • still to learn audit techniques required

5 further areas in the appendix

Table 4

Table 4 · Where to start

The 3 entries a chief ICT security officer role is least likely to hire without. The ordering is computed from the skill data, not from what pays.

Each entry opens a course search for that skill. Career Overlap earns nothing from these links.

Appendix

Appendix · The rest of the record

All 18 skills that carry over
Skill Type
  • already held ICT security legislation knowledge
  • already held ICT security standards knowledge
  • already held cyber security knowledge
  • already held data protection knowledge
  • already held develop information security strategy skill
  • already held ensure compliance with legal requirements skill
  • already held ensure information privacy skill
  • already held implement ICT security policies skill
  • already held information confidentiality knowledge
  • already held information security strategy knowledge
  • already held internal risk management policy knowledge
  • already held risk management knowledge
  • already held conduct impact evaluation of ICT processes on business skill
  • already held identify legal requirements skill
  • already held manage digital identity skill
  • already held manage keys for data protection skill
  • already held protect personal data and privacy skill
  • already held train employees skill
The 5 learning areas not shown above
Skill to pick up Tier
07 assisting and caring 3 required, 1 supplementary
  • still to learn ensure adherence to organisational ICT standards required
  • still to learn establish an Information Security Management System required
  • still to learn comply with legal regulations required
  • optional, not held apply operations for an ITIL-based environment optional
08 engineering, manufacturing and construction 1 required, 2 supplementary
  • still to learn security engineering required
  • optional, not held ICT communications protocols optional
  • optional, not held ICT infrastructure optional
09 arts and humanities 1 required
  • still to learn ethics required
10 services 1 required
  • still to learn cyber attack counter-measures required
11 social sciences, journalism and information 1 supplementary
  • optional, not held control objectives for information and related technology optional
28 supplementary skills, helpful but not required
Skill to pick up Tier
  • optional, not held apply operations for an ITIL-based environment optional
  • optional, not held control objectives for information and related technology optional
  • optional, not held ICT communications protocols optional
  • optional, not held ICT encryption optional
  • optional, not held ICT infrastructure optional
  • optional, not held ICT recovery techniques optional
  • optional, not held ICT system user requirements optional
  • optional, not held Internet of Things optional
  • optional, not held assess ICT knowledge optional
  • optional, not held cloud monitoring and reporting optional
  • optional, not held cloud security and compliance optional
  • optional, not held cloud technologies optional
  • optional, not held computer forensics optional
  • optional, not held coordinate technological activities optional
  • optional, not held execute ICT audits optional
  • optional, not held implement a firewall optional
  • optional, not held implement a virtual private network optional
  • optional, not held implement anti-virus software optional
  • optional, not held implement cloud security and compliance optional
  • optional, not held internet governance optional
  • optional, not held optimise choice of ICT solution optional
  • optional, not held software anomalies optional
  • optional, not held web application security threats optional
  • optional, not held World Wide Web Consortium standards optional
  • optional, not held computer programming optional
  • optional, not held create solutions to problems optional
  • optional, not held manage staff optional
  • optional, not held use different communication channels optional
31 held skills the chief ICT security officer role does not ask for
Skill Type
  • not needed by the target role GDPR knowledge
  • not needed by the target role address identified risks skill
  • not needed by the target role advise on government policy compliance skill
  • not needed by the target role analyse legal enforceability skill
  • not needed by the target role apply information security policies skill
  • not needed by the target role apply system organisational policies skill
  • not needed by the target role assist with litigation matters skill
  • not needed by the target role cooperate with colleagues skill
  • not needed by the target role data ethics knowledge
  • not needed by the target role define organisational standards skill
  • not needed by the target role develop organisational policies skill
  • not needed by the target role develop training programmes skill
  • not needed by the target role document project progress skill
  • not needed by the target role estimate impact of risks skill
  • not needed by the target role information governance compliance knowledge
  • not needed by the target role internal auditing knowledge
  • not needed by the target role keep up-to-date with regulations skill
  • not needed by the target role legal case management knowledge
  • not needed by the target role legal research knowledge
  • not needed by the target role legal terminology knowledge
  • not needed by the target role maintain internal communication systems skill
  • not needed by the target role manage data for legal matters skill
  • not needed by the target role monitor legislation developments skill
  • not needed by the target role perform data cleansing skill
  • not needed by the target role perform project management skill
  • not needed by the target role provide legal advice skill
  • not needed by the target role respect data protection principles skill
  • not needed by the target role respond to enquiries skill
  • not needed by the target role support managers skill
  • not needed by the target role use consulting techniques skill
  • not needed by the target role write work-related reports skill
29 gaps that are knowledge rather than practice

Knowledge gaps usually close through study. Practical skill gaps usually need something you can point at.

Skill to pick up Tier
  • still to learn ICT network security risks required
  • still to learn ICT process quality models required
  • still to learn ICT project management required
  • still to learn ICT project management methodologies required
  • still to learn attack vectors required
  • still to learn cyber attack counter-measures required
  • still to learn decision support systems required
  • still to learn ethical hacking principles required
  • still to learn organisational resilience required
  • still to learn assessment of risks and threats required
  • still to learn audit techniques required
  • still to learn ethics required
  • still to learn security engineering required
  • optional, not held control objectives for information and related technology optional
  • optional, not held ICT communications protocols optional
  • optional, not held ICT encryption optional
  • optional, not held ICT infrastructure optional
  • optional, not held ICT recovery techniques optional
  • optional, not held ICT system user requirements optional
  • optional, not held Internet of Things optional
  • optional, not held cloud monitoring and reporting optional
  • optional, not held cloud security and compliance optional
  • optional, not held cloud technologies optional
  • optional, not held computer forensics optional
  • optional, not held internet governance optional
  • optional, not held software anomalies optional
  • optional, not held web application security threats optional
  • optional, not held World Wide Web Consortium standards optional
  • optional, not held computer programming optional
Index

Other moves recorded from data protection officer

Full index of moves from data protection officer

FAQ

Common questions about this move

Can a data protection officer become a chief ICT security officer?

Yes, and it is a career change move. A data protection officer already covers 24% of what a chief ICT security officer is expected to do: 18 skills carry over, 12 of which the chief ICT security officer role treats as required.

What skills does a data protection officer need to become a chief ICT security officer?

35 required skills are missing, plus 28 optional ones. They fall into 11 areas of the ESCO skill hierarchy, led by information and communication technologies (icts). The single most important is establish an ICT security prevention plan.

How hard is the move from data protection officer to chief ICT security officer?

Its learning distance is 84.3 out of 100, which is the career change band. That accounts for both how much is missing and how specialised those skills are.

Note

How this record was compiled

Both occupations are taken from ESCO, which lists the skills and knowledge each occupation is expected to have and marks every one required or optional. Nothing here is a prediction about hiring, and nothing here knows that a particular employer wants a particular certificate. Treat Table 3 as a starting point for your own research rather than a syllabus. The full method states what these figures can and cannot tell you.