I am really confused about way to follow to become a Security Auditor... and the opportunities it has in future.. esp. in India?
Currently I am working as a Security Consultant but dealing only with Security Related products including Firewalls, NMS, IPS etc and not Standards like BS7799, ISO27001, CoBit etc.
Being in Networking since 4 years now I am confused about approaching technical certs in Security like CCIE security for example or go for ISMS certs or CISA.. which could help me to achieve my goal of Security & Network Auditor.
As I am unsure about the value of ISMS certs for an individual to land up in Auditing Field along with the career opportunities.
Currently I hold CCNA, CeH and perusing CISSP.
Any suggestions or tips will be highly appreciated.. as like everyone, even I am concerned about my career and the path to choose.