For some of the core roles, they have advertised openly across professional networks. I've had job specs for Security Director, Security Training Manager, Security Team Leader etc. Looking at the spec and the experience/qualifications they want, they're taking the roles seriously.
The CEO, David Grevemberg, trains at my local BJJ club. He's a switched on guy.