You might be lucky, by all means give it a go.  Security is a specialist area requiring considerable experience as well as training and certifications.  Those certifications are a good measure of expertise – the good ones generally require at least 5 years of practical industry experience as well as 1-2 years of study.  Most security specialists do come from a technical background, but effective security requires a robust understanding of business, since good security is not just about technology.  This is a doubly rare mix, and relatively difficult and expensive to hire for.  This is an area where it makes sense to access the expertise and skills you require as a high-quality service, at predictable cost value.  We encourage you to weigh up the cost of retaining a full-time security resource, or even relying on your IT guys to own business security, when considering the cost-value proposition of the services phew! can provide.