What do you do if you want to negotiate your salary in Information Security?

Ao negociar seu valor, leve em consideração não apenas o salário, mas também outros benefícios e oportunidades de crescimento profissional que a empresa pode oferecer. Esteja preparado para articular como sua contribuição pode agregar valor à organização e como você pode ajudar a mitigar riscos de segurança e proteger os ativos de informação da empresa.

If there's something more important than knowing your worth, that is BEING worth. Certificates do mean a lot. Experience means more than certificates. But attitude, ethics, willingliness to learn, efficient-working (not necessarily hard working), problem solving and interpersonal skills make the extra mile for what you are worth. These skills along with other abilities would make you more valuable.

## Know your worth in InfoSec: Negotiation like a pro! Before negotiating your infosec salary, do your homework! Research industry standards for your role, considering factors like certs (CISSP, CEH) and experience. Remember, information security professionals are the gatekeepers of a company's digital fortress. Your skills protect them from costly breaches - that deserves top dollar! #InfoSec #NegotiateLikeAPro #KnowYourWorth

Negotiating the salary of a cybersecurity professional should not be very different from hiring other technology specialists or other sectors in general. It is true that there is a great demand and the shortage of talent is generating a salary storm that can lead to distorting the market, but let us not forget that time puts everything in its place and it is not in our best interest to be in a wrong position. The appropriate salary for a cybersecurity professional will depend on their studies, knowledge, certifications, experience... what we need to acquire other transversal skills such as the ability to manage teams, communicate... That is, very similar to what we usually do.

You should research your market value thoroughly before starting salary negotiations. Also your specialized skills in cybersecurity are in demand factor that expertise into your expectations.

Preparing your salary negotiation pitch can significantly enhance your confidence during the discussion. Practice this pitch with a friend or mentor, concentrating on delivering your message clearly and concisely. Anticipate any potential questions or objections your employer might have, such as questioning the necessity of a salary increase. For instance, if your area of expertise is in threat intelligence, prepare to explain the value of your work in preemptively identifying and mitigating risks, which ultimately saves the company resources. This practice session will help you navigate the negotiation smoothly and maintain professionalism, even in challenging moments. Practice, Practice, Practixe. The mirror helps too!

Negotiations is important. Look beyond the paycheck to other compensatory benefits that employers might offer. Elements like extra Paid Time Off (PTO), health insurance benefits, the option for remote work, or chances for professional growth can be highly valuable. In the Information Security field, where keeping abreast of emerging threats and technologies is essential, the opportunity to negotiate for company-sponsored training or certifications can be immensely beneficial, sometimes equating to or surpassing the value of a direct salary raise. Additionally, flexibility in work location and the possibility of a more adaptable work environment underscore your understanding of a balanced work-life dynamic.

Be careful what you ask for in these situations. Know why you're doing something before you do it. In this case, know the next steps that will back up the additional compensation you want. You've invoked a stimulus. Be ready for the appropriate response. Purposefully plan ahead and exceed expectations. Show appreciation and blow it out if you get it. That proves that it was the right decision and sets you up for another round.

Be careful. Why are you asking for more compensation? Sometimes it's a good thing if you're underpaid for the role or perhaps have an outsized impact on corporate revenue. In these and other cases, then of course you should ask for more compensation. If you're following random posts on Blind, Glassdoor, or similar and playing the comparison game... maybe check yourself. That's dangerous. Here's some considerations: Industry, Location, Experience, Role, Need, Revenue Impact, Emotional Maturity, Corporate Politics, and more. Think through all the angles. Finally, for better or worse, I've been effective in negotiating excellent pay. That comes with outsized expectations. You have to perform.

La negociación del salario de un profesional de la ciberseguridad no debería ser muy distinta a la del desempeño de otros especialistas tech o de otros sectores en general. Es cierto que existe una gran demanda y la escasez de talento está generando una burbuja salarial que puede llegar a distorsionar el mercado, pero no olvidemos que el tiempo pone todo en su sitio y no conviene que nos coja en una posición equivocada. El salario justo de un profesional de la ciberseguridad estará en función de sus estudios, conocimientos,.certificaciones, experiencia... a lo que habremos de sumarle otras habilidades transversales como la capacidad de dirigir equipos, de comunicarse... Es decir, muy similar a lo que solemos hacer generalmente..