Career transition

IT Manager → Cybersecurity Engineer

Not generic reskilling advice, but an analysis of the distance between two specific occupations: tasks, skills, pace, money and risk.

01 · Starting distance

Transition realism index

Five factors answer a more useful question than “will it work?”: where the route is naturally strong and where proof is needed.

68%realistic route

This is a realistic route. The strongest support is Market opportunity (94%), while the main constraint is Task similarity (41%). The index estimates the distance between roles, not your ability.

Skill transfer72%
Task similarity41%
Entry accessibility68%
Market opportunity94%
Resilience gain71%
Starting roleIT Manager · 37%
→
Learning estimate6–12 months
→
Target roleCybersecurity Engineer · 24%

02 · What changes in the work

Task comparison

The work shifts from Analysis and data toward Routine operations, a 42-point change. This is the main behavioral adjustment in the move.

IT ManagerCybersecurity Engineer41% · profile similarity
Analysis and data
-46
People and communication
-13
Creation and design
+8
Hands-on work
0
Control and accountability
+9
Routine operations
+42

IT Manager: high-exposure tasks

setting goals and success criteria55%
planning resources and timelines50%
assigning accountability46%

Cybersecurity Engineer: high-exposure tasks

03 · Foundation and gaps

Skill-gap map

The map shows the gap between your starting point and a level you can demonstrate to an employer through work evidence—not simply “know / do not know.”

Already transferable

  • understanding of the processes that will be digitized
  • planning
  • risk management
  • negotiation
  • financial literacy

Needs development

  • AI security
  • digital forensics
  • autonomous-system security
  • deepfake detection
  • threat assessment
  • procedural discipline
01

AI security

Prove it in “Applied case: IT Manager → Cybersecurity Engineer transition case”: include a distinct output that uses aI security.

5 wk
start 24%target 82%
02

digital forensics

Prove it in “Applied case: IT Manager → Cybersecurity Engineer transition case”: include a distinct output that uses digital forensics.

5 wk
start 39%target 76%
03

autonomous-system security

Prove it in “Applied case: IT Manager → Cybersecurity Engineer transition case”: include a distinct output that uses autonomous-system security.

6 wk
start 19%target 87%
04

deepfake detection

Prove it in “Applied case: IT Manager → Cybersecurity Engineer transition case”: include a distinct output that uses deepfake detection.

6 wk
start 33%target 89%
05

threat assessment

Prove it in “Applied case: IT Manager → Cybersecurity Engineer transition case”: include a distinct output that uses threat assessment.

7 wk
start 42%target 79%
06

procedural discipline

Prove it in “Applied case: IT Manager → Cybersecurity Engineer transition case”: include a distinct output that uses procedural discipline.

7 wk
start 30%target 90%

04 · Choose a pace

Three transition scenarios

The same route affects work, money and fatigue differently. A duration without weekly effort says very little.

Keep your current job

14mo.4 h/week
242 hours total

Two short weekday sessions and one hands-on weekend block.

First applications
11 months
Trade-off
Income is protected, but market feedback arrives later.

First apply AI security in the current role, then build the portfolio.

Accelerated entry

6mo.12 h/week
312 hours total

Four study blocks weekly, weekly practice and mentor review.

First applications
4 months
Trade-off
The new qualification develops faster, but fatigue and a shallow portfolio are real risks.

Start applying before training ends and improve evidence every week.

05 · If the direct jump is too large

Bridge occupations

These are not mandatory stops. They matter when they provide paid experience in the new kind of work before the full move.

IT Manager→AI Security Engineer→Cybersecurity Engineer
in 72%out 81%≈ 14 mo.

The AI Security Engineer role lets you learn part of the new task set in a more familiar context, then approach Cybersecurity Engineer with stronger evidence.

IT Manager→Analytics Engineer→Cybersecurity Engineer
in 89%out 64%≈ 14 mo.

The Analytics Engineer role lets you learn part of the new task set in a more familiar context, then approach Cybersecurity Engineer with stronger evidence.

IT Manager→AI Workflow Designer→Cybersecurity Engineer
in 89%out 64%≈ 14 mo.

The AI Workflow Designer role lets you learn part of the new task set in a more familiar context, then approach Cybersecurity Engineer with stronger evidence.

06 · Evidence over certificates

Portfolio project

One project cannot replace experience, but it gives an employer something concrete to discuss and shows you can finish real work.

36 hours

Applied case: IT Manager → Cybersecurity Engineer transition case

Take a real but anonymized situation from your current field and solve it as a Cybersecurity Engineer would. The central project task is a role-specific task.

Your advantage is domain context from IT Manager. Make it visible: show which beginner mistakes it helps you avoid.

What the project folder should contain

  1. A working output an interviewer can open, test and discuss
  2. A concise decision memo covering inputs, constraints and two rejected alternatives
  3. A result check using measurable criteria plus one failed approach and what changed
  4. A public 5–7-screen case study with all confidential data removed

What makes the project strong

  • visible use of aI security
  • a real-world problem rather than a tutorial exercise
  • a measurable outcome and explicit limitations
  • enough depth to support technical interview questions

07 · България · pay before tax

Income trajectory

Within the modeled horizon, income may not return to the current level; plan a financial buffer in advance. This is a scenario model, not a pay promise.

Now: €2 760Now€2 760During study: €2 705During study€2 705First offer: €1 061First offer€1 061+1 year: €1 251+1 year€1 251+2 years: €1 490+2 years€1 490Model horizon: €2 130Model horizon€2 130
Now€2 760
During study€2 705
First offer€1 061
+1 year€1 251
+2 years€1 490
Model horizon€2 130
Show long-term salary comparison through 2035
IT Manager€2 760 → €4 100
Cybersecurity Engineer€1 340 → €2 130
IT Manager · 2026: €2 7602026IT Manager · 2027: €2 8802027IT Manager · 2028: €3 0102028IT Manager · 2029: €3 1502029IT Manager · 2030: €3 2902030IT Manager · 2031: €3 4402031IT Manager · 2032: €3 5902032IT Manager · 2033: €3 7602033IT Manager · 2034: €3 9202034IT Manager · 2035: €4 1002035Cybersecurity Engineer · 2026: €1 340Cybersecurity Engineer · 2027: €1 410Cybersecurity Engineer · 2028: €1 490Cybersecurity Engineer · 2029: €1 560Cybersecurity Engineer · 2030: €1 650Cybersecurity Engineer · 2031: €1 730Cybersecurity Engineer · 2032: €1 820Cybersecurity Engineer · 2033: €1 920Cybersecurity Engineer · 2034: €2 020Cybersecurity Engineer · 2035: €2 130

08 · Technology horizon

How automation risk changes

The move reduces modeled automation exposure by 4 points by 2035, but the target role is not immune: its task mix also changes.

2026
37%IT Manager24%Cybersecurity Engineer
2028
40%IT Manager30%Cybersecurity Engineer
2030
44%IT Manager37%Cybersecurity Engineer
2035
50%IT Manager46%Cybersecurity Engineer

09 · An honest check

What you may not like

A good career choice is more than a list of benefits. Before studying, check whether you can live with the target role’s daily reality.

01

Less certainty than it appears

Many decisions in the target role are made with incomplete information, and quality is not visible immediately.

02

The daily rhythm will change

The target role contains substantially more working with data and ambiguous conclusions. That can be tiring even when the occupation sounds appealing in theory.

03

Entry pay may dip

Modeled average pay in the target occupation is lower. A financial buffer or an internal project may help avoid losing seniority.

10 · Where to start

Suggested sequence

  1. 01

    Review 20–30 Cybersecurity Engineer vacancies and record actual tasks, mandatory requirements and tools.

  2. 02

    Define the bridge from IT Manager: understanding of the processes that will be digitized. Prepare two examples where this experience produced a measurable result.

  3. 03

    Learn AI security and digital forensics to the level of completing an independent practical task—not merely finishing a course.

  4. 04

    Create a safe lab case with a threat model, detection, response and report without touching third-party systems.

  5. 05

    Review 20–30 vacancies and choose only courses or certificates that repeatedly appear in employer requirements.

  6. 06

    Rewrite your résumé for Cybersecurity Engineer, add the case and begin with test applications, internships, projects or adjacent tasks at your current employer.

All timelines, salaries and percentages are scenario estimates. They depend on starting skills, location, experience, weekly study time and employer requirements. Validate the route through practitioner conversations, a test project and real vacancies.