What does an average day look like for somebody working in cybersecurity?

That isn’t an easy question to answer when you consider the vastness of the field. Somebody who works in cybersecurity needs to stay constantly abreast of industry changes – especially new attacks cooked up by cybercriminals – and help their employers create and tweak their security plans.

However, thanks to Tom Vazdar, who has developed the Open Institute of Technology’s (OPIT’s) Master’s Degree in Enterprise Cybersecurity, we can provide some insight into what your average day may look like.

Who Is Tom Vazdar?

Serving as the Program Chair of OPIT’s upcoming Master’s Degree in Cybersecurity, Tom brings a vast amount of practical experience to the table. His work has spanned the globe. Tom has been employed as the Chief Security Officer for a major Croatian bank, in addition to serving as the Chief Information Officer for a company in the United States’ manufacturing sector.

His practical experience spans other industries – including technology and finance – and he’s currently completing a doctorate while running his own practice. Tom’s specialty is the behavioral aspect of cybersecurity. His deep understanding of the “culture” that surrounds the field has been shaped by his work on development strategies, policies, and frameworks for his past employers.

The Importance of Trends

The first thing Tom highlights is that a cybersecurity professional has to follow the trends in the industry. As he points out: “We are living in an era where digital transformation is accelerating, and with it, the complexity and frequency of cyber threats are also increasing.” To demonstrate this, he points to an ISACA report published in 2023 showing that cyber attacks have increased 48% in 2023 compared to 2022. More worryingly, 62% of the organizations that experience these attacks underreport them – an indication that many simply don’t have the talent to truly understand the threat they face.

As a cybersecurity professional, your role is to provide the expertise such companies are sorely lacking.

Thankfully, many business leaders understand that they need this expertise. Tom points out that 59% of leaders say they’re understaffed in the cyber department, leading to a rising demand for people with the following technical skills:

  • Identity and access management
  • Data protection
  • Cloud computing
  • DevSecOps (development, security, and operations)

Furthermore, Tom says that artificial intelligence (AI) is completely transforming the cybersecurity industry. While AI is often beneficial to professionals in the field – it can enhance threat detection and response – it is also a danger. Malicious entities can use AI to conduct a new wave of attacks, such as data poisoning, for which you need to be prepared as a cybersecurity professional.

Tom’s discussion of these emerging trends highlights one of the most critical aspects of a day in the life of a cybersecurity professional – learning is key. There is no such thing as static knowledge because the industry (and the attacks your company may face) constantly evolve.

An Average Day Broken Down

Now that you understand how important staying on top of the ever-changing trends in cybersecurity is for those in the field, it’s possible to break things down a little further. On an average day, you may find yourself working on any, some, or even all of the following tasks.

Developing and Maintaining a Cybersecurity Strategy

Given that such a large number of business leaders are understaffed and have minimal access to appropriate talent, you’ll often be tasked with creating and maintaining a company’s cybersecurity strategy.

This strategy is not as simple as creating a collection of actions to take in the event of an attack.

Tom emphasizes not only the importance of proactivity, but also of integrating a cybersecurity strategy into the wider business strategy. “It becomes part of the mission and vision,” he says. “After all, there are two things that are important to companies – their data and customer trust. If you lose customer trust, you lose your business. If you lose your data, you lose your business.”

As a technically adept professional, you’ll be tasked with building a strategy that grows ever more complex as the threats the company faces become more advanced. New technologies – such as AI and machine learning – will be used against you, with your main task being to ensure the strategy you create can fend off such technologically-empowered attacks.

The Simpler Day-to-Day

Now, let’s move away from the complexities of developing an overarching plan and go into more detail about daily responsibilities. A cybersecurity professional is usually tasked with dealing with the day-to-day maintenance of systems.

It’s all about control.

Tom says that much of the role involves proactively identifying new protective measures. For instance, software patching is key – outdated software has vulnerabilities that a hacker can exploit. You’ll need to stay up to date on the development of patches for the software your company uses and, crucially, implement those patches as soon as they’re available.

Creating regular backups is also part of this day-to-day work. It’s an area that many businesses neglect – perhaps assuming that nothing bad can happen to them – but a backup will be a lifesaver if a hacker compromises your company’s main data stores.

Tending to Your Ecosystem

It’s not simply your own institution that you must maintain as a cybersecurity professional – everyone who interacts with that institution must also be managed. Vendors, external software developers, and any other part of your supply chain need to be as risk-aware as your business. As Tom puts it: “If they don’t care about vulnerabilities in their system, and they work for you as a company, then you’ll have an issue because their risk suddenly becomes your risk.”

As such, managing the cyber security aspect of your company’s relationships with its partners is a vital part of your duties. You may engage in planning with those partners, helping them improve their practices, or cooperate with them to create strategies encompassing your entire supply chain.

Continued Education

Tom goes on to highlight just how important continued education is to the success of a cybersecurity professional. “It’s always interesting. And if you’re really passionate about it, cybersecurity becomes your lifestyle,” he says. “You want to see what’s new. What are the new attack methods, what are your competitors doing, and what is new on the market.”

He points to a simple example – phishing emails.

These emails – which were traditionally laden with spelling errors that made them easier to spot – are becoming increasingly hard to detect thanks to the use of AI. They’re written better. Failure to understand and adapt to that fact could make it harder to educate yourself and the people in your company.

Your average day may also involve educating your colleagues about upcoming threats and new attack methods they need to understand. The phishing example Tom shares applies here. Any email that looks somewhat legitimate is a threat, so continued education of your colleagues is essential to stop that threat from having its intended effect.

An Example of a Typical Project

Given how vast the cybersecurity field is, the range of projects you may work on will vary enormously. However, Tom provides an example of when he worked in the banking industry and saw the rise of the Zeus Botnet.

In this case, his responsibilities were twofold.

First – finding a way to defend against botnet attacks. That involved researching the malware to figure out how it spread, allowing him to put protective measures in place to prevent that spread. The second task involved creating educational programs, both for employees and his bank’s clients, to make them aware of the Zeus Botnet.

Here, we see the education part of the cybersecurity professional’s “average day” coming into play, complementing the more technical aspects of dealing with malware. We even see supply chain risk coming into play – each client is part of the bank’s supply chain, meaning they need to understand how to defend themselves just as much as the bank does.

The Qualifications Needed to Work in Cybersecurity

With a multitude of cybersecurity qualifications available – many covering specific niches – it’s tough to find the appropriate one to make you attractive to an employer. That’s where Tom’s work with OPIT comes in. The master’s degree that he’s developing not only focuses on the technical skills a professional needs but places those skills in a business context.

The upcoming course will offer electives in subjects such as AI, cloud security, and IoT security, granting students flexibility to pursue a specialization within their degree. The overall program is also closely aligned to industry certifications – such as those offered by CISSP – to ensure graduates are as industry-ready as they are academically qualified.

The intention, Tom says, is to fill the skills gap that 3 million businesses say they have in cybersecurity. The program provides the right blend of knowledge between technical and managerial skills, in addition to allowing students to pursue subjects of particular interest to them.

Ultimately, it doesn’t teach absolutely everything that you could learn about the industry. No course can. But it does equip you with key foundational knowledge aligned with industry certifications that make you more employable. That, combined with your continued education and completion of relevant certifications once you’re employed, means you have an enormous opportunity to build a successful cybersecurity career with OPIT.

So, the qualifications needed for the industry start with a relevant degree. They then blossom out. Professionals focus on courses that meet the specific requirements of their roles so that they learn the cybersecurity techniques that are most effective for their needs.

 

Related posts

OPIT Supporting a New Generation of Cybersecurity Leaders
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Aug 28, 2025 5 min read

The Open Institute of Technology (OPIT) began enrolling students in 2023 to help bridge the skills gap between traditional university education and the requirements of the modern workplace. OPIT’s MSc courses aim to help professionals make a greater impact on their workplace through technology.

OPIT’s courses have become popular with business leaders hoping to develop a strong technical foundation to understand technologies, such as artificial intelligence (AI) and cybersecurity, that are shaping their industry. But OPIT is also attracting professionals with strong technical expertise looking to engage more deeply with the strategic side of digital innovation. This is the story of one such student, Obiora Awogu.

Meet Obiora

Obiora Awogu is a cybersecurity expert from Nigeria with a wealth of credentials and experience from working in the industry for a decade. Working in a lead data security role, he was considering “what’s next” for his career. He was contemplating earning an MSc to add to his list of qualifications he did not yet have, but which could open important doors. He discussed the idea with his mentor, who recommended OPIT, where he himself was already enrolled in an MSc program.

Obiora started looking at the program as a box-checking exercise, but quickly realized that it had so much more to offer. As well as being a fully EU-accredited course that could provide new opportunities with companies around the world, he recognized that the course was designed for people like him, who were ready to go from building to leading.

OPIT’s MSc in Cybersecurity

OPIT’s MSc in Cybersecurity launched in 2024 as a fully online and flexible program ideal for busy professionals like Obiora who want to study without taking a career break.

The course integrates technical and leadership expertise, equipping students to not only implement cybersecurity solutions but also lead cybersecurity initiatives. The curriculum combines technical training with real-world applications, emphasizing hands-on experience and soft skills development alongside hard technical know-how.

The course is led by Tom Vazdar, the Area Chair for Cybersecurity at OPIT, as well as the Chief Security Officer at Erste Bank Croatia and an Advisory Board Member for EC3 European Cybercrime Center. He is representative of the type of faculty OPIT recruits, who are both great teachers and active industry professionals dealing with current challenges daily.

Experts such as Matthew Jelavic, the CEO at CIM Chartered Manager Canada and President of Strategy One Consulting; Mahynour Ahmed, Senior Cloud Security Engineer at Grant Thornton LLP; and Sylvester Kaczmarek, former Chief Scientific Officer at We Space Technologies, join him.

Course content includes:

  • Cybersecurity fundamentals and governance
  • Network security and intrusion detection
  • Legal aspects and compliance
  • Cryptography and secure communications
  • Data analytics and risk management
  • Generative AI cybersecurity
  • Business resilience and response strategies
  • Behavioral cybersecurity
  • Cloud and IoT security
  • Secure software development
  • Critical thinking and problem-solving
  • Leadership and communication in cybersecurity
  • AI-driven forensic analysis in cybersecurity

As with all OPIT’s MSc courses, it wraps up with a capstone project and dissertation, which sees students apply their skills in the real world, either with their existing company or through apprenticeship programs. This not only gives students hands-on experience, but also helps them demonstrate their added value when seeking new opportunities.

Obiora’s Experience

Speaking of his experience with OPIT, Obiora said that it went above and beyond what he expected. He was not surprised by the technical content, in which he was already well-versed, but rather the change in perspective that the course gave him. It helped him move from seeing himself as someone who implements cybersecurity solutions to someone who could shape strategy at the highest levels of an organization.

OPIT’s MSc has given Obiora the skills to speak to boards, connect risk with business priorities, and build organizations that don’t just defend against cyber risks but adapt to a changing digital world. He commented that studying at OPIT did not give him answers; instead, it gave him better questions and the tools to lead. Of course, it also ticks the MSc box, and while that might not be the main reason for studying at OPIT, it is certainly a clear benefit.

Obiora has now moved into a leading Chief Information Security Officer Role at MoMo, Payment Service Bank for MTN. There, he is building cyber-resilient financial systems, contributing to public-private partnerships, and mentoring the next generation of cybersecurity experts.

Leading Cybersecurity in Africa

As well as having a significant impact within his own organization, studying at OPIT has helped Obiora develop the skills and confidence needed to become a leader in the cybersecurity industry across Africa.

In March 2025, Obiora was featured on the cover of CIO Africa Magazine and was then a panelist on the “Future of Cybersecurity Careers in the Age of Generative AI” for Comercio Ltd. The Lagos Chamber of Commerce and Industry also invited him to speak on Cybersecurity in Africa.

Obiora recently presented the keynote speech at the Hackers Secret Conference 2025 on “Code in the Shadows: Harnessing the Human-AI Partnership in Cybersecurity.” In the talk, he explored how AI is revolutionizing incident response, enhancing its speed, precision, and proactivity, and improving on human-AI collaboration.

An OPIT Success Story

Talking about Obiora’s success, the OPIT Area Chair for Cybersecurity said:

“Obiora is a perfect example of what this program was designed for – experienced professionals ready to scale their impact beyond operations. It’s been inspiring to watch him transform technical excellence into strategic leadership. Africa’s cybersecurity landscape is stronger with people like him at the helm. Bravo, Obiora!”

Learn more about OPIT’s MSc in Cybersecurity and how it can support the next steps of your career.

Read the article
How Regenerative Business Models Are Redefining Innovation and Sustainability
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Aug 18, 2025 6 min read

Open Institute of Technology (OPIT) masterclasses bring students face-to-face with real-world business challenges. In OPIT’s July masterclass, OPIT Professor Francesco Derchi and Ph.D. candidate Robert Mario de Stefano explained the principles of regenerative businesses and how regeneration goes hand in hand with growth.

Regenerative Business Models

Professor Derchi began by explaining what exactly is meant by regenerative business models, clearly differentiating them from sustainable or circular models.

Many companies pursue sustainable business models in which they offset their negative impact by investing elsewhere. For example, businesses that are big carbon consumers will support nature regeneration projects. Circular business models are similar but are more focused on their own product chain, aiming to minimize waste by keeping products in use as long as possible through recycling. Both models essentially aim to have a “net-zero” negative impact on the environment.

Regenerative models are different because they actively aim to have a “net-positive” impact on the environment, not just offsetting their own use but actively regenerating the planet.

Massive Transformative Purpose

While regenerative business models are often associated with philanthropic endeavors, Professor Derchi explained that they do not have to be, and that investment in regeneration can be a driver of growth.

He discussed the importance of corporate purpose in the modern business space. Having a strong and clearly stated corporate purpose is considered essential to drive business decision-making, encourage employee buy-in, and promote customer loyalty.

But today, simple corporate missions, such as “make good shoes,” don’t go far enough. People are looking for a Massive Transformational Purpose (MTP) that can take the business to the next level.

Take, for example, Ben & Jerry’s. The business’s initial corporate purpose may have been to make great ice cream and serve it up in a way that people will enjoy. But the business really began to grow when they embraced an MTP. As they announced in their mission statement, “We believe that ice cream can change the world.” Their business activities also have the aim of advancing human rights and dignity, supporting social and economic justice, and protecting and restoring the Earth’s natural systems. While these aims are philanthropic, they have also helped the business grow.

RePlanet

Professor Derchi next talked about RePlanet, a business he recently worked to develop their MTP. Founded in 2015, RePlanet designs and implements customized renewable energy solutions for businesses and projects. The company already operates in the renewable energy field and ranked as the 21st fastest-growing business in Italy in 2023. So while they were already enjoying great success, Derchi worked with them to see if actively embracing a regenerative business model could unlock additional growth.

Working together, RePlanet moved towards an MTP of building a greener future based on today’s choices, ensuring a cleaner world for generations. Meeting this goal started with the energy products that RePlanet sells, such as energy systems that recover heat from dairy farms. But as the business’s MTP, it goes beyond that. RePlanet doesn’t just engage suppliers; it chooses partners that share its specific values. It also influences the projects they choose to work on – they prioritize high-impact social projects, such as recently installing photovoltaic energy systems at a local hospital in Nigeria – and how RePlanet treats its talent, acknowledging that people are the true energy of the company.

Regenerative Business Strategies

Based on work with RePlanet and other businesses, Derchi has identified six archetypal regenerative business strategies for businesses that want to have both a regenerative impact and drive growth:

  • Regenerative Leadership – Laying the foundation for regeneration in a broader sense throughout the company
  • Nature Regeneration – Strategies to improve the health of the natural world
  • Social Regeneration – Regenerating human ecosystems through things such as fair-trade practices
  • Responsible Sourcing – Empowering and strengthening suppliers and their communities
  • Health & Well-being – Creating products and services that have a positive effect on customers
  • Employee Focus – Improve work conditions, lives, and well-being of employees.

Case Studies

Building on the concept of regenerative business models, Roberto Mario de Stefano shared other case studies of businesses that are having a positive impact and enjoying growth thanks to regenerative business models and strategies.

Biorfarm

Biorfarm is a digital platform that supports small-scale agriculture by creating a direct link between small farmers and consumers. Cutting out the middleman in modern supply chains means that farmers earn about 50% more for their produce. They set consumers up as “digital farmers” who actively support and learn about farming activities to promote more conscious food consumption.

Their vision is to create a food economy in which those who produce food and those who consume it are connected. This moves consumers from passive cash cows for large corporations that prioritize profits over the well-being of farmers to actively supporting natural production and a more sustainable system.

Rifo Lab

Rifo Lab is a circular clothing brand with the vision of addressing the problem of overproduction in the clothing industry. Established in Prato, Italy, a traditional textile-producing area, the company produces clothes made from textile waste and biodegradable materials. There are no physical stores, and all orders must be placed online; everything is made to order, reducing excess production.

With an eye on social regeneration, all production takes place within 30 kilometers of their offices, allowing the business to support ethical and local production. They also work with companies that actively integrate migrants into the local community, sharing their local artisan crafts with future generations.

Ogyre

Ogyre is a digital platform that allows you to pay fishermen to fish for waste. When fishermen are out conducting their livelihood, they also collect a significant amount of waste from the ocean, especially plastic waste. Ogyre arranges for fishermen to get paid for collecting that waste, which in turn supports the local fishing communities, and then transforms the waste collected into new sustainable products.

Moving Towards a Regenerative Future

The masterclass concluded with a Q&A session, where it explained that working in regenerative businesses requires the same skills as any other business. But it also requires you to embrace a mindset where value comes from giving and that growth is about working together for a better future, and not just competition.

Read the article