I do IT security.
I actually do it for a rather large US bank, but I am based in London. The security job market across the world is still in dire need for people
We need good network security analysts, good programmers and people who can deconstruct malware. That is the "blue" side of things.
On the other side you have the "red" teaming. People who can hack and crack things. They will essentially be good programmers.
Also there are things like threat analysis, where you're almost being a spy on a computer. You lean TTP (tactics, techniques and procedures) of actors e.g. Panda groups and other eastern European hacking groups.
Then you have the governance side of things. SOX, 27001, and a whole bunch of other shyt I don't even like.
Security is a VERY wide field, and I am interviewing a lot of potential employees with years of experience and more certs than me, makes me realise certifications aren't shyt. The clue is in the name, they are meant to CERTIFY you know something. So a lot of people put the cart before the horse is the wrong thing.
If anyone wants to get into security 1st, I say to some form of networking education with hands on experience e.g. CCNA - learn what ICMP is, learn the TCP headers, know what value is in an IP header to indicate a TCP packet is coming next. Then understand how Windows and Linux works. Install the OS's on a VM and get playing. Then figure out if you want to go down the red side - then learn how the internet works e.g. HTTP headers, CGI, how Javascript works, learn SQL and how to inject code, learn XSS, CSRF, etc. Or come down to the blue side - learn how malware works, learn to deconstruct it, learn what DLL's it loads (interject with learning how Windows works)
There is no 1 certification to get. I still don't and neverevever will get a CISSP as I think the cert is worthless for my field of work. The knowledge is probably good to have in general though. I have 3 certs all from GIAC/SANS, but they were after I had around 2/3 years as a Network Security Analyst.
I also have a BSc in Computer Networking and an MSc in Information Security, which has helped me gain the position I had. But things are different in Europe
Also, one HUGE thing, no matter what type of IT you go into, LEARN PROGRAMMING!! I lost a dream job because of it
But that is all IMO