From Curiosity to Cyber Security: Maria Kim’s Path to Protecting the Digital World

Maria Kim’s journey into cyber security began with a spark of curiosity and a desire to make a difference. She now works as a Cyber Security Governance Specialist at Steadfast Group and its equity businesses in Sydney.

After years of working in the educational and corporate sectors, Maria decided to pivot her career toward a field where she could help protect organisations from cyber threats. She enrolled in the Institute of Data’s Cyber Security Programme, a decision that would set her on a path to success in this rapidly evolving industry.

Now, Maria is thriving in her new role, where she manages user cyber security training and cyber security awareness programmes, ensures compliance, and conducts phishing simulation campaigns, all while being part of a supportive and dynamic team in the heart of the CBD.

Discover how Maria’s determination and her passion for cyber security paved the way for her exciting new career. 

1. Hi Maria, please tell me a little bit about yourself. 

My name is Maria Kim, and I’m very curious. I like learning about different cultures, taking long walks by the ocean, and meeting my friends. I also really enjoy travelling around New Zealand because it is such a beautiful place. 

There are many stunning hikes here, and even just driving around is relaxing and enjoyable.

I also love learning new recipes and cooking meals for my family and friends. My favourite dish to cook is kimchi soup, made with fermented cabbage, pork, onions, tofu, and a special kimchi paste – it’s delicious! It’s also good for your gut and body because it contains probiotics and natural bacteria, providing a lot of Vitamin C and boosting your energy.  

2. What did you do before you studied cyber security?

During my time at university, I studied Business Studies and majored in Management, which was a highly research-based degree. I learned a great deal about how people, new organisations, and business innovations work.

I chose to pursue this field of study because I’m very oriented toward working with people. I have accumulated over 12 years of experience in New Zealand’s educational and corporate sectors, working in various administrative, coordination and research roles.

Before enrolling in the Cyber Security Programme, I worked for a government agency and also served as a business researcher.

3. Why did you switch careers to cyber security?

While I was working at my previous role, a significant cyber security incident occurred within another government organisation, making headlines and highlighting the substantial impact a cyberattack can have on an organisation.

This cyber incident sparked my interest in learning about cyber security. I did my research and discovered that there is a significant gap in cyber security skills that is not being addressed in New Zealand or globally.

I also saw a significant cyber-knowledge gap affecting many industries.

I want to help people and organisations stay cyber-safe and protect their sensitive information, available data, and assets.

This is why I decided to sign up for the Cyber Security Programme. 

4. How did you land on studying cyber security with the Institute of Data?

One of my friends mentioned the Cyber Security Programme to me, and she sent me a link. 

I did my own research, read the whole website, and then contacted a career advisor for a one-on-one call to address the questions I had. That was very helpful — speaking to professionals who knew the programme thoroughly.

I decided to enrol in a Cyber Security Programme after speaking with the programme advisors, who acknowledged that my research skills would be valuable in the cyber industry.

I trusted the programme advisors and agreed that my research background would make me a great fit to become an investigator in the cyber space. They suggested that my research background could make me well-suited to work as an investigator in the cyber space, and I agreed.

I was worried that not having an IT scripting background would prevent me from entering the programme.

However, the advisors assured me that the programme is designed to be accessible to people without an IT background, including all the foundational skills.

Also, it was really important to get hands-on experience from industry professionals. That was one of the main selling points of the programme for sure.

5. What was your experience with the programme like?

At the very beginning, I struggled a lot. I spent many hours after class revising my labs and taking additional labs on the TryHackMe Platform. 

The main challenge for me was the intensity of the programme. Every day, I learnt something new, and I spent a few hours studying before and after the programme.

I conducted my own research to better understand the many concepts we covered. This was actually a helpful exercise as it reflected the reality of the cyber security world, where many processes are new or non-existent and require proactive problem-solving and investigation to find solutions.

The people were exceptional professionals who really wanted to help me get through the programme and prepare me for the industry.

For example, the lead trainer provided his own study notes to help extend the boundaries of the programme. He gave us many useful in-class exercises, such as designing and subnetting an organizational network, presenting case studies, and using tools related to GRC (governance, risk and compliance work).

Also, while the full-time Cyber Security Programme was intense and tough, I really enjoyed it. I was so glad I could dedicate myself to the full-time programme where I could give all my attention to the courses and labs we were working on. I wouldn’t have wanted to enrol in the part-time programme because I don’t believe I would have been as focused throughout.

6. Do you have any advice for those beginning the programme?

Also, contact the Job Outcome Programme team as soon as possible if you want to secure a job more quickly.

They can assist you in revising your CV, cover letter, and LinkedIn profile and provide advice on how to prepare for an interview.

They are incredible supporters, and engaging with them made me feel supported and never alone.

The job outcome team connected me with real professionals from the cyber security industry, one of whom became my mentor. 

7. What was the job hunt process like?

After three months of job hunting, I decided to reach out to the Job Outcomes Team.

Together with Kate and Komal (career coaching professionals working on the Job Outcomes Team), we discussed various topics related to my job-hunting journey.

Komal is an outstanding professional, and she was always there for me.

I felt very supported as she provided a lot of emotional encouragement to help me stay positive and on track – I highly recommend contacting Kate and Komal during your studies, as they can share a lot of tips and tricks on how to be better prepared for your job interviews.

My advice for those looking for work in the industry is to be prepared for a tough market and tough competition.

The job hunt journey is a comprehensive package. 

8. Can you tell me about your new role?

I am still relatively new to my role. I am a Cyber Security Governance Specialist at the Steadfast Group and I look after its equity businesses.

My responsibilities include managing user cyber security training and cyber security awareness programmes, ensuring compliance consent, and conducting phishing simulation campaigns. I really look forward to these tasks.

I’m currently undergoing training and learning new tools and software.

What I like about this job is first and foremost my team. They have been so supportive and hospitable. I also like that our office is located in the heart of the CBD area in Sydney – it’s very vibrant. I’m just so grateful to be a part of this company.  

9. How does it feel to be working in the cyber security industry finally?

I am part of an amazing team, and I am constantly learning from my experienced colleagues. It’s a great opportunity to collaborate and learn from them.

10. You mentioned that you’re passionate about advocating for women in cyber security. Can you tell me more about that?

It struck me that I was the only female in my programme’s cohort. Also, there is also a significant gender gap in the cyber security industry. So, I want women to know that they can excel in a career in cyber security just like anyone else. 

Through my career, I want to inspire other women and show them that they can break into the industry.

If I succeed in my cyber security journey, I might inspire other women to join the field.

I personally know many women who are excellent researchers with strong soft skills, great communication abilities, and attention to detail. These skills are invaluable when investigating cyber security attacks, and women with these skills can be a great asset to the industry.

As a newcomer, I am eager to support other women from the Institute of Data Cyber Security Programme.

I met a female cyber security professional who served as one of the lead trainers at the Institute of Data. As I got to know her, I found her to be an exceptional cyber security professional. She accepted me and took me under her wing as a mentor. I believe that if other women can find a mentor like her in the industry, it would be incredibly beneficial.

I would gladly serve as a mentor for any women graduating from the programme.

11. What excites you about your future now that you’re in the cyber security industry?

I am excited that I have the opportunity to contribute to protecting our cyber world, and I am dedicated to becoming a cyber professional and making our world a better place to live.

I believe that my journey and my skills and experience have led me to the right place where I can add significant value, while also advancing my career and broadening my perspectives and opportunities.

Reflecting back, I would like to express my heartfelt gratitude to all the staff members involved in the programme. Their dedication and hard work have not gone unnoticed. The instructors and lead trainers demonstrated a wealth of industry knowledge and remained up-to-date with the latest technologies, which greatly benefitted me and my experience into the industry.

If you’d like to learn more about our Cyber Security Programme, please download a course outline.

Alternatively, you can speak about the programme directly with a team member by booking a career consultation to start your journey with an actionable plan.

You can connect with Maria and follow her professional journey on LinkedIn.