Security Assurance: https://lnkd.in/dg-qNiiS
Security Architecture and Engineering: https://lnkd.in/d_f2Gm-d
Cyber Risk and Compliance: https://lnkd.in/d8gXfE9f
Lastly, connect and network yourself with industry security organizations and meet other security professionals. You get more first hand exposure to what companies are looking for and roles that are open or pending recruitment.
If you are still in college you can apply for internships which will give you some experience to leverage. Try to be realistic when apply for your first full time role. I'd recommend focusing on companies you are interested in even more than specific roles. If you get an admin or even help desk role at a company that has a mission you believe in you'll have a foot in the door you can use to make connections on the InfoSec team to work your way toward your larger goals.
Ken recommends the following next steps:
If you are seeking information about the tools or mechanisms to conduct your search for a position you are already qualified for and ready to move then I would suggest a diversified use of LinkedIn, Indeed and Dice. These tend to be the top3 tech related job opportunity search engines and postings. With that said, there are also 100's of others so dont limit yourself if you have good luck somewhere else.
On the other hand, if your question is how to get qualified. I would suggest college programs which specialize in this discipline or there are also professional certification programs and MANY schools that offer this both in person and remote. Make sure to look into the school itself and the brand to ensure quality and respectability of their certificate.
The most effective way to seek a position is to know a company that is actively searching for a person and apply. In fact, if the company implements a referring program, the most effective would be to be referred by someone you know in this company.
Another way is to check with your school if they have contact or are in relation with companies that seek for young graduates with your profile and apply to these companies.
A less efficient way is to use the job search engines like Indeed.com. Or social media like linkedIn.com
If you know a specific company that works in your domain then you can browse to the company's website, search for the career option and seek for openings in that domain. This is risky because there are probably more companies than you think that may have a job opening in what you are looking for. Working at Dell, I did the search:
there are many opening there. And this one limits to the United States:
I recommend you get internship in the company you want to work for so that you have some fore taste of what it would look like. Again, talking for Dell more specifically, Dell offers great internship opportunities so that you can learn the company before starting to work with us (since this is what I am talking about). Most companies in the US start seeking interns between September and March of the following year, with a clear focus between September and December. March is when either the target numbers are not reached or new opportunities were created.
I hope it helps.