You can still get an associate of ISC2 even if you don't have the required work experiance for the CISSP. As for where to start most start with Security+ but that won't get you a job in security. getting a job in security will depend largely on who you know or being lucky since you have no experience. If you feel that the Sec+ is below what you already know than you can challenge the GSEC for around $900 or fork over your savings and take the training/test for around $4000. There are also many fields in security to go into so maybe you should decide which one you want to be in and start there.