Cyber talent gap widens
Nearly half of all cybersecurity roles globally remain unfilled as companies struggle to find professionals who possess both technical expertise and business acumen, according to a report by Accenture. The report, titled Reinventing the Cyber Workforce, revealed that 46 per cent of cybersecurity positions are currently vacant. It noted that while 59 per cent of open roles require a hybrid blend of technical depth, business knowledge and leadership qualities, only 40 per cent of the current workforce is employed in roles that fit that profile.
“Modern cybersecurity sits at the intersection of digital platforms, AI deployment, regulatory accountability, operational resilience and customer trust. Accenture’s analysis of more than 550,000 cybersecurity job postings and professional profiles reveals that the real constraint is not merely the number of cybersecurity professionals available, but whether they possess the right mix of technical and soft skills to operate effectively at the enterprise level. It is a gap between what modern cybersecurity requires and what labour markets have to offer,” the report noted.
Accenture highlighted a disproportionate divide in the labour market between “Conductors” — professionals who can translate business goals into secure architecture, quantify risk and guide cross-functional decisions and “Operators”, who remain primarily execution-focused with technical skill sets.
However, the cybersecurity labour market continues to offer mostly operator roles, resulting in a workforce optimised to operate tools rather than to guide enterprise resilience, the report noted.
Compounding the talent shortage is a significant decline in employee retention, driven by sustained operational pressure and work-related stress. The average tenure of cybersecurity professionals has fallen to 1.8 years during the 2015-2025 period, down from 3.3 years in 2005-2015.
Despite these attrition pressures, organisational underinvestment remains high. Fewer than 30 per cent of organisations fund structured upskilling programmes, and 57 per cent cite insufficient internal investment as a direct cause of talent shortages.
The rapid advancement of Artificial Intelligence (AI) is further complicating the landscape. Demand for AI-related cybersecurity skills has more than doubled since 2020. “AI will play a critical role in cyber defence, but it must be governed by human judgement, clear authority and practised execution — keeping humans in the lead. The call to action is straightforward: build a cyber AI-ready workforce equipped with the skills, judgement and operating models that enable people to make better decisions faster. The capability gap is not theoretical. It is the reason many incidents escalate into crises,” said Harpreet Sidhu.
