@loquaciousloka This is a fairly loaded question - looks like you've got some great questions. It really goes back to what you are trying to accomplish with your security team.
@loquaciousloka 1. Are you following or required to adhere to a set of standards (NIST, 27001, etc.)?
2. Don't focus on just TECH - some of the best "security" people can come from the business. People who understand critical process, BCP requirements, etc.
3. I could go on all day.
@seanlinehan While I certainly question a candidate about short stints, it's never a deal breaker. We shouldn't hold it against someone for moving to a new situation if that's what was best for them.