As a side note. In the past 5 years of doing serious contracting work in every industry you can think of (pharma, banking, manufacturing, etc) the places where I have seen info sec taken the most seriously are two: gaming studios (any) and Bloomberg.