The demand for AI-related cybersecurity skills has more than doubled since 2020 and is now outpacing available supply globally. Average cybersecurity job tenure has fallen from 3.3 years to just 1.8. More than half of cybersecurity professionals report frequent work-related stress.
These are signals of a workforce under serious pressure and a talent model that no longer fits its purpose. To fix this model, organizations need to understand what’s going wrong, how it’s impacting their business, and why the solution to solving the cybersecurity talent gap isn’t just about headcount. It’s about capabilities.
Cybersecurity roles have fundamentally changed
Not long ago, cybersecurity teams operated separately from most company functions and focused mainly on implementing controls, monitoring threats and responding to incidents. So long as cyber staff were well-trained on networks, firewalls, and malware, strong technical specialization was sufficient.
However, today, cybersecurity sits at the intersection of business strategy, digital platforms, regulation and customer trust. Cyber teams are no longer a nice-to-have. They are the first line of business resilience. That shift demands something the traditional talent model was never designed to produce.
