Post the job and attract the right candidates

Rough outline for this section–please contribute

1. Where to post the job
   1. HR may handle this
   2. You should guide HR (be part of the process)
2. Recruiting internally within your organization
   1. Security Champions
   2. IT, Compliance, and Security-adjacent roles
   3. Interns or self-directed interest
3. Ask for recommendations
4. Promote the job opening yourself
   1. Post where candidates hang-out online and at conferences
5. Target candidates in non-cybersecurity roles