From Curiosity to Cybersecurity: Maria Kim’s Path to Protecting the Digital World

Maria Kim’s journey into cybersecurity began with a spark of curiosity and a desire to make a difference. She now works as a Cybersecurity Governance Specialist at Steadfast Group and its equity businesses in Sydney. 

After years of working in the educational and corporate sectors, Maria decided to pivot her career toward a field where she could help protect organizations from cyber threats. She enrolled in the Institute of Data’s Cybersecurity Program, a decision that would set her on a path to success in this rapidly evolving industry. 

Now, Maria is thriving in her new role, where she manages user cybersecurity training and cybersecurity awareness programs, ensures compliance, and conducts phishing simulation campaigns, all while being part of a supportive and dynamic team in the heart of the CBD.

Discover how Maria’s determination and her passion for cybersecurity paved the way for her exciting new career. 

1. Hi Maria, please tell me a little bit about yourself. 

My name is Maria Kim, and I’m very curious. I like learning about different cultures, taking long walks by the ocean, and meeting my friends. I also really enjoy traveling around New Zealand because it is such a beautiful place. 

There are many stunning hikes here, and even just driving around is relaxing and enjoyable.

I also love learning new recipes and cooking meals for my family and friends. My favorite dish to cook is kimchi soup, made with fermented cabbage, pork, onions, tofu, and a special kimchi paste – it’s delicious! It’s also good for your gut and body because it contains probiotics and natural bacteria, providing a lot of Vitamin C and boosting your energy.  

2. What did you do before you studied cybersecurity?

During my time at university, I studied Business Studies and majored in Management, which was a highly research-based degree. I learned a great deal about how people, new organizations, and business innovations work.

I chose to pursue this field of study because I’m very oriented toward working with people. I have accumulated over 12 years of experience in New Zealand’s educational and corporate sectors, working in various administrative, coordination, and research roles.

Before enrolling in the Cybersecurity Program, I worked for a government agency and also served as a business researcher.

3. Why did you switch careers to cybersecurity?

While I was working at my previous role, a significant cybersecurity incident occurred within another government organisation, making headlines and highlighting the substantial impact a cyberattack can have on an organisation.

This cyber incident sparked my interest in learning about cybersecurity. I did my research and discovered that there is a significant gap in cybersecurity skills that is not being addressed in New Zealand or globally.

I also saw a significant cyber-knowledge gap affecting many industries.

I want to help people and organizations stay cyber-safe and protect their sensitive information, available data, and assets.

This is why I decided to sign up for the Cybersecurity Program. 

4. How did you land on studying cybersecurity with the Institute of Data?

One of my friends mentioned the Cybersecurity Program to me, and she sent me a link. 

I did my own research, read the whole website, and then contacted a career advisor for a one-on-one call to address the questions I had. That was very helpful — speaking to professionals who knew the program thoroughly.

I decided to enroll in a Cybersecurity Program after speaking with the program advisors, who acknowledged that my research skills would be valuable in the cyber industry.

I trusted the program advisors and agreed that my research background would make me a great fit to become an investigator in the cyberspace. They suggested that my research background could make me well-suited to work as an investigator in the cyberspace, and I agreed.

I was worried that not having an IT scripting background would prevent me from entering the program.

However, the advisors assured me that the program is designed to be accessible to people without an IT background, including all the foundational skills.

Also, it was really important to get hands-on experience from industry professionals. That was one of the main selling points of the program for sure.

5. What was your experience with the program like?

At the very beginning, I struggled a lot. I spent many hours after class revising my labs and taking additional labs on the TryHackMe Platform. 

The main challenge for me was the intensity of the program. Every day, I learned something new, and I spent a few hours studying before and after the program.

I conducted my own research to better understand the many concepts we covered. This was actually a helpful exercise as it reflected the reality of the cybersecurity world, where many processes are new or non-existent and require proactive problem-solving and investigation to find solutions.

The people were exceptional professionals who really wanted to help me get through the program and prepare me for the industry.

For example, the lead trainer provided his own study notes to help extend the boundaries of the program. He gave us many useful in-class exercises, such as designing and subnetting an organizational network, presenting case studies, and using tools related to GRC (governance, risk and compliance work).

Also, while the full-time Cybersecurity Program was intense and tough, I really enjoyed it. I was so glad I could dedicate myself to the full-time program where I could give all my attention to the courses and labs we were working on. I wouldn’t have wanted to enroll in the part-time program because I don’t believe I would have been as focused throughout.

6. Do you have any advice for those beginning the program?

Also, contact the Job Outcome Program team as soon as possible if you want to secure a job more quickly.

They can assist you in revising your CV, cover letter, and LinkedIn profile and provide advice on how to prepare for an interview.

They are incredible supporters, and engaging with them made me feel supported and never alone.

The job outcome team connected me with real professionals from the cybersecurity industry, one of whom became my mentor. 

7. What was the job hunt process like?

After three months of job hunting, I decided to reach out to the Job Outcomes Team.

Together with Kate and Komal (career coaching professionals working on the Job Outcomes Team), we discussed various topics related to my job-hunting journey.

Komal is an outstanding professional, and she was always there for me.

I felt very supported as she provided a lot of emotional encouragement to help me stay positive and on track – I highly recommend contacting Kate and Komal during your studies, as they can share a lot of tips and tricks on how to be better prepared for your job interviews.

My advice for those looking for work in the industry is to be prepared for a tough market and tough competition.

The job hunt journey is a comprehensive package. 

8. Can you tell me about your new role?

I am still relatively new to my role. I am a Cybersecurity Governance Specialist at the Steadfast Group, and I look after its equity businesses.

My responsibilities include managing user cybersecurity training and cybersecurity awareness programs, ensuring compliance consent, and conducting phishing simulation campaigns. I really look forward to these tasks.

I’m currently undergoing training and learning new tools and software.

What I like about this job is, first and foremost, my team. They have been so supportive and hospitable. I also like that our office is located in the heart of the CBD area in Sydney – it’s very vibrant. I’m just so grateful to be a part of this company.  

9. How does it feel to be working in the cybersecurity industry finally?

I am part of an amazing team, and I am constantly learning from my experienced colleagues. It’s a great opportunity to collaborate and learn from them.

10. You mentioned that you’re passionate about advocating for women in cybersecurity. Can you tell me more about that?

It struck me that I was the only female in my program’s cohort. There is also a significant gender gap in the cybersecurity industry. So, I want women to know that they can excel in a career in cybersecurity just like anyone else. 

Through my career, I want to inspire other women and show them that they can break into the industry.

If I succeed in my cybersecurity journey, I might inspire other women to join the field.

I personally know many women who are excellent researchers with strong soft skills, great communication abilities, and attention to detail. These skills are invaluable when investigating cybersecurity attacks, and women with these skills can be a great asset to the industry.

As a newcomer, I am eager to support other women from the Institute of Data Cybersecurity Program.

I met a female cybersecurity professional who served as one of the lead trainers at the Institute of Data. As I got to know her, I found her to be an exceptional cybersecurity professional. She accepted me and took me under her wing as a mentor. I believe that if other women can find a mentor like her in the industry, it would be incredibly beneficial.

I would gladly serve as a mentor for any women graduating from the program.

11. What excites you about your future now that you’re in the cybersecurity industry?

I am excited that I have the opportunity to contribute to protecting our cyber world, and I am dedicated to becoming a cyber professional and making our world a better place to live.

I believe that my journey and my skills and experience have led me to the right place where I can add significant value, while also advancing my career and broadening my perspectives and opportunities.

Reflecting back, I would like to express my heartfelt gratitude to all the staff members involved in the program. Their dedication and hard work have not gone unnoticed. The instructors and lead trainers demonstrated a wealth of industry knowledge and remained up-to-date with the latest technologies, which greatly benefitted me and my experience in the industry.

If you’d like to learn more about our Cybersecurity Program, please download a course outline.

Alternatively, you can speak about the program directly with a team member by booking a career consultation to start your journey with an actionable plan.

You can connect with Maria and follow her professional journey on LinkedIn.