In a tight labor market like ours in the U.S., its more common for employees to job hop. Employers facing a talent shortage pull out all the stops, offering incentive packages and other benefits that often make it too enticing to resist, even for the gainfully employed. 

Job scammers know this and take full advantage. We even received job scam calls as we were putting together this month's Tips! Hear one on PrivacyGuidance.com, recorded March 23, 2019:

$10,000 Every Week Scam

As you listen to the above recording, keep in mind I never  requested any information, as the caller stated. Trying to make their calls seem legitimate is a common tactic among scammers attempting to head off complaints of unsolicited calls.

Fake Amazon Jobs: Candidates are promised six-figure earnings for working with Amazon vendors. 

Fake Seed Money: Candidates are sent a check and encouraged to return some of the money to the scammer and use the rest to get supplies they need to start their business. When the bank discovers the check is fake, the victim is on the hook for the money. 

Fake Secret Shoppers: A check and a job offer arrive in the mail. The recipient is asked to "secret shop" a Walmart or similar store's money transfer service using some of the money from the check. The rest is for them to keep. Except the check is fake, and just like with the scam above, the secret shopper is now on the hook with the bank. 

Fake Purchasing Clerk Jobs: Scammers contact jobseekers who have posted their resumes online to offer a unique opportunity to them based on where they live, often a state with no sales tax. The scammers convince the victim their "company" will save money by running purchases through them. The victim is asked to use their personal credit card for the local purchases, but not to worry... the "company" will reimburse... just send along your bank's routing and account number, and they'll deposit the funds. Of course, that never happens, and now the scammers have unfettered access to the victim's bank account. 

As news of security incidents continue to hit mainstream media at a break-neck pace, legislators are increasingly pressured to get involved. After all, what concerns their constituents concerns them, and more voters than ever before are paying attention to the security and privacy of their personal information. 

When Equifax revealed its 2017 breach, one of the largest the world had ever seen, U.S. Senators promised to look into the incident. After investigating, a Senate panel concluded the breach was caused by an " institutional neglect toward cybersecurity" within Equifax. 

In his testimony before the panel, the Equifax CEO disagreed with the report's findings.  However, it's noteworthy that this CEO joined the company  after the 2017 breach. 

Lawmakers around the world, at local and federal levels, are becoming much more proactive in pushing for laws and regulations to better protect personal information. Organizations that handle (collect, use, share, secure, etc.) personal data can expect more hearings, penalties and new, more comprehensive regulations to come in the near term.

I get this question a lot, and even more so recently. Our industry and the advocacy around it is generating a great deal of interest, and I'm so proud to be among the leaders who get to field questions like this from aspiring privacy pros and their family members. 

The one thing I know FOR SURE is the information security and privacy industries could use more diversity. New threats, vulnerabilities and risks are being identified every day, requiring the development of inventive and effective solutions. We can achieve that much more quickly with a broader set of perspectives.

That's why I love getting this question from people who are unsure about their potential to thrive in data security and privacy careers. Those are the people we often need the most. They may not have the traditional background or education, but that's okay. Heck, it may even be GREAT. 

It is always advisable to be an expert in emerging areas (or at least the person who became knowledgeable before others). There are so many developing areas within the disciplines of security and privacy, so my advice would be to find a niche that inspires you and go after it with gusto. Just a few of these are artificial intelligence (AI), Internet of Things (IoT), cryptography and surveillance. 

Two other pointers:

Effective communications can be an important differentiator. Consider developing your talents by taking courses on business writing or speech and debate. 

Look into joining an industry association, such as ACM, IEEE, ISACA, IAPP and/or ISSA. Not only do they have fantastic training opportunities, but the networks available will be incredibly valuable as you work to develop inroads with potential employers and mentors. 

Best of luck!