Expanding the security candidate pool is a critical step in better aligning security with the business and creating cross-functional teams.