In the fast-paced world of cybersecurity, the need for skilled professionals has never been greater. According to the latest figures from ISC2, the global cybersecurity workforce gap has surged by 19% in the past year, with an estimated 4.8 million more professionals needed to adequately secure organizations.

One of the top causes of cybersecurity staffing shortages, as cited by ISC2 survey respondents, is a lack of budget in 2024. This has now surpassed a shortage of talent as the primary factor contributing to these shortages.

The 2024 ISC2 Cybersecurity Workforce Study also revealed that global cybersecurity workforce growth has slowed for the first time in six years. Despite this, there are still approximately 5.5 million active cybersecurity professionals, showcasing the demand for skilled individuals in this field.

However, the study also uncovered that 90% of respondents reported having skills gaps within their security teams, with a particular lack of entry-level roles. Hiring managers are currently focused on hiring mid to advanced level roles, rather than creating a diverse mix of experience and abilities within their teams.

Economic Instability Driving Cyber Workforce Shortage

The report highlighted the significant impacts of global economic instability on cybersecurity teams, with many experiencing budget cuts, layoffs, hiring freezes, and fewer promotions within their teams. Despite these challenges, cybersecurity professionals believe that the current threat landscape is the worst they have seen in five years.

Andy Woolnough, ISC2 Executive Vice President of Corporate Affairs, emphasized the importance of investing in hiring and professional development opportunities to address the growing cyber risks. He stressed the need for skills development to meet the challenges posed by emerging technologies like AI and keep critical assets secure.

AI the Top Skills Gap in Security Teams

The top skills gap reported by participants was in AI, followed by cloud computing security, zero trust implementation, digital forensics, incident response, and application security. Surprisingly, only 12% of hiring managers prioritize AI skills when recruiting cyber professionals, indicating a potential mismatch in the skills needed versus what is being sought by employers.

The insights gathered from the 2024 ISC2 Cybersecurity Workforce Study provide valuable information for cybersecurity practitioners and decision-makers across different regions, highlighting the ongoing challenges and opportunities in the cybersecurity landscape.