The global cybersecurity workforce is facing a skills shortage, according to the latest data from the 2024 Cybersecurity Workforce Study by ISC2 Research. The study, which surveyed nearly 16,000 cybersecurity practitioners and decision-makers worldwide, revealed that the cybersecurity workforce is not growing as fast as the demand for skilled professionals.
Despite efforts to cut costs, existing cybersecurity roles have not been lost, but economic factors have hindered the creation of new job opportunities in the field. The decrease in new cybersecurity job postings indicates a lack of hiring and promotion opportunities for security talent in the past year.
The report also highlighted a shortage of entry points for new talent and a lack of opportunities for on-the-job learning to address skills and personnel shortages. A staggering 90% of organizations reported having skills gaps within their security teams, with key areas such as artificial intelligence/machine learning, cloud computing security, and digital forensics and incident response lacking skilled professionals.
To combat this skills gap, ISC2 Research recommends that employers attract new talent to cybersecurity with realistic expectations and provide in-role professional development opportunities. Embracing a hiring strategy that values a diverse array of people and skills, rather than solely focusing on pre-qualified individuals, is crucial in addressing the disparity in the cybersecurity workforce.
Employers are urged to communicate their needs effectively and adjust their expectations to attract professionals with the necessary skills, rather than expecting candidates to have unattainable years of experience and industry certifications. By taking proactive steps to address the skills shortage, organizations can build a stronger and more resilient cybersecurity workforce for the future.