What is a security professional? Knowing what good looks like