I'm a *nix sysAdmin for last 5 years. For last one year I've been engaged with PCI-DSS and SAS70 audits at our company and got introduced with Information Security. I have found my interest in InfoSec and reviewing the possibilities on career switch from sysAdmin to InfoSec.
What I've found is that three layers of skills are needed to penetrate fully in InfoSec industry. These are what I think are best for a teche person otherwise I've met some InfoSec auditors with high auditing skills but low computer security sense.
First layer is core technical skill like RHCSS, CEH, Penetration Tester, Forensic Investigator etc Second is technical policy and management stuff like CISSP from ISC2. Third is Auditing and compliance like CISA, CISM etc from ISSACA.
I need opinions from InfoSec community persons on my above thoughts. Thanks