If you’re a PM and want to get into cyber, then program or project manager is a good toehold into the field. IT compliance also shares many soft skills that are required in project management, such as attention to detail. You will get the exposure and in parallel be able work on some certs. If you want to get technical, it will need to be full immersion for you. ...Books, podcasts, setting up a small lab at home to help ramp. Most jobs within cyber are technical and that’s why several transition from programmers, network engineers, systems administrators, etc. It is an extremely steep learning curve without an applicable technical background. It’s always a very broad field too - so usually you have to specialize. If you work for a small company specializing can be a luxury and it’s trial by fire and learn as you go. This field has a 1% unemployment rate, largely due to an extremely high burnout rate, especially in incident response. You’re always under budgeted compared to the adversary, under staffed, under tooled. If there is a breach at your company, it could mean that they clean house of all security personnel regardless of who is at fault. it’s foolish but it does happen. With that said it does have a low unemployment rate, so rebounding should be easier. You have to constantly think like an attacker, and pay attention to all the evil shit attackers are doing. That can be disheartening at times so you have to have grit. You have to have thick skin. You will make enemies with: new policies and capabilities you roll out, measures you take during an incident, etc. You will cause outages with deployments at some point in your career no matter how much you test because shit happens. So you have to have passion for the work. You have to want to do good, make the world a safer place so to speak. If that sounds like you, see my first paragraph for advice. If that does not sound like it’s for you, get your PMP. You can’t go wrong with your PMP. It’s highly valued and transferable from industry to industry.