Cybersecurity industry workforce remains stagnant, maintaining a count of 5.5 million experts worldwide
The cybersecurity sector is witnessing a surge in demand for mid- to advanced-level roles, as revealed by a recent survey conducted by ISC2 in collaboration with Forrester [1]. However, the sector is also grappling with a significant skills shortage, which is making it difficult for companies to fill these positions.
According to ISC2's annual report, the global cybersecurity workforce grew by a mere 0.1% year-over-year, reaching an estimated 5.5 million people [2]. This growth represents a potential stall in the sector's growth, which has been on an upward trajectory since 2019.
The skills shortage is so severe that nearly one-third of the surveyed hiring managers reported no entry-level professionals on their security teams [1]. This shortage is further exacerbated by the fact that ISC2 calculates the difference between active cybersecurity professionals and the need for more practitioners based on the number of roles survey respondents say is needed to properly secure their organizations.
The gap between the active workforce and the perceived unmet need for additional cybersecurity professionals grew by 19% to 4.8 million jobs globally [2]. In the U.S., there are approximately 570,000 unfilled roles [2].
One of the reasons for this skills shortage is the rapid advancement of technology in the cybersecurity field. The increasing use of advanced technologies like Artificial Intelligence (AI) and Generative AI (GenAI) is potentially reducing the need for specialized education for some entry-level roles [2]. However, it's important to note that AI is more likely to augment existing roles rather than replace them entirely.
Economic factors also play a role in the hiring process. Economic uncertainty and business contraction in certain markets can affect hiring decisions, potentially leading to a slower pace of new job openings [1].
In an effort to address the skills shortage, the National Cyber Director, Harry Coker Jr., recently unveiled a program aimed at filling the gap of available cybersecurity jobs across the U.S. [3]. This program aims to reach candidates without traditional qualifications, such as a degree in computer science or engineering.
Despite these challenges, the demand for cybersecurity professionals is not decreasing. In fact, cybersecurity jobs grew by 8.7% in 2022, according to ISC2 [2]. The total workforce needed to satisfy demand jumped 8% to 10.2 million people last year [2].
In conclusion, while the cybersecurity sector is facing challenges in filling positions due to skills shortages and the evolving nature of cybersecurity roles, the demand for cybersecurity professionals remains high. Efforts are being made to address the skills shortage, and it is hoped that these initiatives will help bridge the gap between the demand for cybersecurity professionals and the available workforce.
References: [1] ISC2 survey with Forrester, May 2023 [2] ISC2 report, June 2023 [3] National Cyber Director's program announcement, June 2023
In the rapidly advancing field of technology, the increasing use of advanced technologies like Artificial Intelligence and Generative AI is potentially exacerbating the skills shortage in cybersecurity, as more specialized education might be required for some entry-level roles. However, it is essential to note that AI is more likely to augment existing roles rather than replace them completely.
The growing demand for cybersecurity professionals, highlighted by a 8.7% increase in cybersecurity jobs in 2022 [2], indicates a persistent need for skilled workers, despite the challenges in filling those positions due to a skills shortage. Efforts are being made to address this issue, with initiatives like the National Cyber Director's program targeted at catering to candidates who lack traditional qualifications [3].
