Can you recall a time you were assigned a task that wasn't a part of your job description? How did you handle this, and what was the outcome?

The best way to answer this is to start by stating that you are always open to pitching in wherever you can to help the company get the job done. You should also emphasize that you are open to learning new skills that will help both you and the company. Then describe an incident to illustrate this.

"I have worked for several small companies where the employees wore many hats. I enjoyed this experience because it allowed me to learn new skills as an information security manager outside of my profession. This helped me grow my portfolio of skills and contributed to the company's success. In one case, I was asked to attend a trade show to research new cybersecurity products from a technical perspective. Even though I had no experience in this area, I accepted the assignment with enthusiasm. Attending the show and interfacing with the suppliers taught me a great deal about how products are developed and marketed, which helped me evaluate new product features and make recommendations for adopting them to our management team."