I applied online and was contacted about 1.5 months later by the recruiter.

I spoke with her on the phone, and she gave me an overview of the position. She informed me that there was no hiring manager yet because Autodesk was still recruiting for a Director-level position for the Cloud Security team. However, someone outside of the team would interview me instead.

A phone interview was scheduled by the recruiter, but 30 minutes before the scheduled time, the interviewer couldn’t make it. A second phone interview was then scheduled. On that day, the interviewer was a no-show. I contacted the recruiter, and she could not locate the interviewer. The following week, another phone interview was scheduled (this was the third attempt).

On the third attempt, the interviewer was late, which cut the total interview time short. The interviewer asked about my skillset, but some of the discussion seemed heated because she "disagreed" with my approach to implementing cloud security based on regulations and standard frameworks. As mentioned in the first paragraph, she was not in the Cloud Security team; she was tasked by Autodesk to conduct interviews until a dedicated Cloud Security personnel was hired. This was akin to interviewing for an accounting position, but the interviewer was from the Marketing department.

Afterward, I did not hear back from the recruiter. Two emails went unanswered. Given the repeated blunders in scheduling phone interviews, the almost "hostile" discussion during the phone interview, and the recruiter's lack of response, I do not believe I wish to work with the Autodesk Security team.

Trying to convince the interviewer that ISO 27001 consists of two separate parts:

• The ISMS framework
• The ISO 27002 controls