Tech Career Decoded #8: Is cybersecurity the next step in your career path?

Cybersecurity is taking centre stage at the upcoming 2024 Paris Olympics as organisers work to protect the Games from a growing wave of cyber threats.

The IT infrastructure behind this massive event is incredibly complex, handling everything from scoring and timing to broadcasting and ticketing — making it a prime target for attacks. This highlights how crucial cybersecurity has become, featuring prominently even in the world’s biggest events.

Despite its critical importance, there is a global shortage of cybersecurity talent. With an estimated 3.4 million cybersecurity experts needed worldwide, one of the biggest dangers isn't the hackers themselves, but the lack of people who can stop them. The cybersecurity field presents an exciting and challenging opportunity for tech professionals to consider, offering the chance to be at the forefront of protecting our digital world.

In this edition of Tech Career Decoded, we’ll take a look at the current state of the cybersecurity talent landscape, why cybersecurity is now a mainstay in the boardroom, and the often-overlooked skills you need to succeed in this field.

Cybersecurity talent shortage & the threat of AI

So, what's causing this skills gap? Recruiting younger generations into cybersecurity can be tough, and burnout is pushing talented professionals out the door faster than we can bring new ones in. Burnout is fueled by the constant pressure to stay ahead of evolving threats, long hours, and a lack of resources. Recruiting younger generations is challenging because cybersecurity careers are often misrepresented as solely technical, failing to capture the investigative, strategic, and problem-solving aspects of the job.

And to make matters more interesting (read: complicated), the rise of AI throws another wrench into the mix. Threat actors can now use generative AI to write extremely convincing phishing emails at scale, or leverage deepfake technology to create realistic videos of executives giving fake instructions, making it harder than ever to tell what's real. AI can even become a hacker's training ground, letting them test and finetune attacks with higher success rates. 

The world of IT is full of challenges, but for many, these hurdles become springboards for immense impact. Take the recent example of a Microsoft engineer, Andres Freund , whose vigilance and expertise stopped a massive cyberattack — preventing a cyber hacker from accessing computers all over the world. As this story shows, a career in cybersecurity offers the exciting opportunity to make a real difference in a world increasingly reliant on secure digital infrastructure.

Cybersecurity is now a C-level priority for organisations 

While businesses are aware of the ever-growing threat, many are still stuck in a "patch-when-it-breaks" mindset. There are many reasons for this, including limited resources, lack of awareness, cost concerns, and technical barriers. But this reactive approach is often a recipe for disaster, leading to greater security risks for companies.

That's why the tides are turning. The Information Security Officer role is becoming increasingly important, with some companies even elevating it to a C-level position. In fact, Gartner predicts that by 2026, 70% of boards will include one member with cybersecurity expertise.

Just like strong finance and operations are crucial for success, robust cybersecurity is no longer an afterthought – it's a fundamental pillar for protecting a company's data, reputation, and future.

3 essential soft skills to succeed in a cybersecurity career

Cybersecurity's rise to prominence means that the days of the lone tech warrior are fading. While technical expertise remains crucial, a focus on soft skills is equally important in today's strategic cybersecurity landscape. Considering a career in cybersecurity, or aiming to advance in your current role? Here are three key soft skills that will help you excel:

1. Collaboration: Teamwork makes the security dream work

Cyber threats are intricate and defeating them requires a cohesive team effort. Strong collaboration skills allow you to work effectively with colleagues across different departments, like IT, HR, and Legal. This makes sure that everyone is aligned on security protocols and can work together to implement comprehensive security strategies.

For instance, imagine identifying a vulnerability or breach in a customer database. Collaboration is key. You'll need to work with IT to develop a fix, legal to ensure compliance with data regulations, and communications to inform customers and rebuild trust.

2. Clear communication: Bridging the tech gap

Technical jargon might impress your fellow security experts, but it leaves others confused. A skilled communicator can translate complex security issues into clear, understandable language for both technical and non-technical audiences. This is crucial for gaining buy-in from upper management, who need to understand the risks and approve necessary security budgets. And for communicating important security measures to the wider organisation. If you want to purchase a new identity and access management tool, you might have to convince the CFO or the CEO of the new security software’s importance. Instead of focusing on the tech specs, a good communicator would focus on the potential financial impact of a data breach and how the software can mitigate that risk.

3. Strategic thinking: Building a long-term defence plan

Great cybersecurity isn't just about reacting to immediate threats. It's about anticipating them and building a powerful defence system. Strategic thinking allows you to see the bigger picture and develop long-term plans to safeguard the company's digital assets.

A security architect doesn't just focus on securing current systems. They consider future technologies and potential threats (such as the AI-powered cyber attacks we mentioned earlier), ensuring that the company's security strategy can adapt and evolve.

👾 By honing these soft skills alongside your technical expertise, you'll be well-equipped to navigate the ever-evolving cybersecurity landscape and keep your organisation safe.

The evolution of cybersecurity around the world

We asked Michael Page experts across the globe to share their insights on how cybersecurity is evolving in their region, the industries with the fastest-growing demand for professionals, and the most valuable skills in this critical field. Here’s what they had to say:

“Rising international geopolitical tensions and the low technological maturity of Italian SMEs cause an increasing number of cyber attacks on Italian companies every year. Most Italian executives now understand the added value of investing in an effective cybersecurity strategy, which is why the cybersecurity sector has grown in recent years. While there's a high security risk in banking and the finance sector, most companies have improved their security measures.

There’s a huge demand for cybersecurity professionals in the manufacturing and energy industries as IT-powered machinery is vulnerable to production-halting cyber attacks. The Chief Information Security Officer position is also in high demand as companies look for someone capable of combining solid technical experience (incident response, network security, penetration testing) with leadership and strategic thinking skills.”

Alberto Mariotti Cesarini Romaldi - Senior Director Technology - Italy

“Here in Brazil, the Data Protection Law has been a gamechanger for information security, forcing companies to hire professionals to comply with regulations and implement data protection practices. We see a demand for cybersecurity professionals in financial services and large B2B companies, like insurance. They understand that strong information security is crucial for staying competitive. When it comes to hiring professionals, LGPD compliance, ISO 27000 familiarity, blue team expertise, employee training proficiency, and the ability to conduct phishing simulations are all high on the priority list.”

Alvaro Siviero Faria – Senior Consultant Technology - Brazil

“As businesses increasingly leverage e-commerce platforms, customer relationship management (CRM) systems, and mobile devices to engage with their customers, the surge in online and mobile traffic has presented more opportunities for cybercriminals to exploit. The demand for cybersecurity professionals is growing fastest in healthcare, technology, financial services, retail, and government sectors. These industries increasingly depend on digital platforms and data. Companies are looking for cybersecurity professionals with expertise in network and cloud security. Beyond technical skills, soft skills such as effective communication, stakeholder engagement, and the ability to influence others are equally important. For cybersecurity professionals to succeed, they need to build cybersecurity awareness within their organisations, and be able to influence and communicate changes at all levels.”

George Kauye - Regional Director Michael Page - Australia

Are you interested in pursuing a career in cybersecurity? If so, what’s stopping you from taking the leap into this exciting field?

We love hearing from our tech-savvy community, so please drop your thoughts in the comments below and join the conversation.

And don't miss out on our future editions by subscribing to stay updated with the latest tech insights.

Thanks for reading!  

The Michael Page Technology team