Former Twitter CISO shares his advice for IT security hiring and cybersecurity