I was contacted by an internal recruiter at Natwest Rooster Money via LinkedIn, which initially sparked my interest in exploring the opportunity. However, my experience throughout the interview process left me with certain concerns. One of the main issues I encountered was the inconsistent job title that changed multiple times during the process. From DevSecOps Security Specialist to Information Security Manager and then to Information Security Consultant, these titles suggested different roles with distinct responsibilities. While all titles included the term 'Security,' the differences in job expectations were significant. Additionally, the job description itself was filled with buzzwords and a mixture of diverse responsibilities. It mentioned certifications like CISSP, which typically indicate a senior-level position. However, the responsibilities listed encompassed a wide range of areas, including Data Loss Protection, Data Privacy, endpoint security, and zero-trust network access. These responsibilities are typically separate and require specific expertise. The lack of clarity in the job description raised concerns about how the company approaches Information Security. During my initial conversation with the internal recruiter, she was polite and amicable, creating a positive impression. However, the salary offered was approximately 40% lower than my previous role, despite the benefits package being reasonably good. Given the company's reputation and trustworthiness, I decided to proceed with the interview process, hoping for a potentially rewarding opportunity. Regrettably, after approximately a week, I received feedback that the hiring manager did not see me as a suitable fit for the role. In hindsight, considering the initial job description and title changes, it was not entirely surprising. From the first glance at the job specifications, I felt overqualified, and the subsequent mismatch between expectations and the interview outcome further confirmed misalignment. Looking back, the changing titles and the vague job description appear to reflect a rushed and inefficient approach to Information Security within the company. As someone with over 20 years of experience in the field, these experiences left me with doubts about the organization's Information Security practices. I hope that by sharing my experience, it will help both the company and potential candidates in understanding the need for clear, accurate, and consistent job descriptions that reflect the actual requirements of the role. It is crucial to provide candidates with a transparent and efficient interview process, ensuring that both parties can make informed decisions.