Meeting The Cyber Talent Challenge Head-On

In 2018 over a billion people were affected by data breaches. Even though we are merely weeks in to 2019, other major organisations have already suffered hacking and threats from cyber criminals, from Singapore Airlines to major government departments.

With a well-documented cyber-skills shortage in the UK, set to be compounded by Brexit in 2019 it is becoming increasingly difficult for organisations to hire the talent they need to protect themselves. What, then can HR professionals do to lead the recruitment, retainment and development of staff in cyber roles?

Attracting cyber-talent in 2019

To recruit talented cyber security staff in a candidate-driven market, organisations must demonstrate that they consider cyber security a board-level issue, and that they welcome innovation. Talented cyber professionals want to know they have the attention and support of seniors in these fast-paced and, often mentally taxing, roles.

It’s worth bearing in mind that the average security salary has increased by 6.3 percent compared to 2017, double the average UK growth of 2.9 percent. Financial reward is undoubtedly important in a competitive market but just as important will be how organisations demonstrate to candidates that they will be given opportunities to train and develop.

Cyber security candidates in particular are increasingly attracted by access to industry mentoring programmes, which HR can be instrumental in developing and driving. In this sector you cannot simply buy loyalty, and learning and development is where HR will be so important in the recruitment and retention of talent. 

Identifying the right roles to future-proof your organisation  

Cyber security is a constantly evolving sector, and in 2018 there were several roles gathering pace. The Security Awareness Manager being one such example; organisations are more widely adopting awareness programmes in response to GDPR or to improve security management.

This is leading to non-technical Awareness Manager roles growing from out of a side-line responsibility within the IT and compliance teams to an organisational wide role commanding impressive salaries.

In our latest salary survey, the greatest salary increase was claimed by the Security Awareness Manager. This role is responsible for security user awareness programmes within an organisation and is focused on behavioural and cultural change to drive better security practices within the workforce.

Pay jumped by 20 percent in just 12 months, with annual salaries sitting between £60- 90k on average. This huge increase reflects the growing cognisance of the number of cyber threats that target personnel and count on employees’ lack of awareness to succeed.

However, when it comes to cyber security job titles there are few firmly agreed descriptors in use. Without the standard industry terms enjoyed by more established disciplines, cyber related CV’s may not clearly specify skills that align with the job description, but that doesn’t mean the candidate doesn’t possess what’s required. In a climate of cyber-skills shortages, it will be increasingly important to demonstrate flexibility in hiring for cyber and look beyond the checklist.

As a developing sector HR must also keep pace with technological change that will demand new talent. For example, through 2019 we will see new roles emerge as technologies such as autonomous cars, connected medical devices and artificial intelligence boom.

These will demand very specific skill sets to ensure implementation is secure and safe. How will your HR teams support brand new roles, the likes of which will require supreme talent and board-level support to succeed?

Make 2019 a year of collaboration and diversification

With these challenges in mind, in 2019 hiring managers will need to work closely with IT and compliance colleagues, as well as the board and wider business to truly understand the organisation’s cyber requirements. Hiring processes must allow for subject matter experts to be closely involved and supported.

Equally, it must be HR’s role to ensure that assets such as adverts, job descriptions and candidate communication encourage those with diverse backgrounds or needs. HR must also be able to facilitate any workplace adjustments necessary to enable accessibility and safeguard employees. Whether race, gender or neuro diversity, cyber is a sector that demands different approaches and innovative thinking.   

Are we nearing the end of cyber talent shortages?

Unfortunately, not. The cyber security skills gap will likely take many more years to close and demand will continue to far outstrip supply. We are likely to see further difficulties during 2019 due to Brexit as it becomes harder for firms to hire international talent. The industry relies heavily on practitioners from around Europe and beyond, particularly in front line work  such as security analysis.

Stemming from this, outsourcing will become an even more prominent factor in security as organisations turn to external contractors to fill vacancies, and offerings such as Managed Security Services will become an essential part of the security strategy. HR will also have a crucial role to play in managing these outsourced relationships and ensuring value for money.

Nevertheless, HR can help to stop security costs spiraling by learning from the hiring strategies of some public bodies.  That focus more on internal development and upskilling for graduates and junior practitioners. Rather than offering increasingly high wages for senior professionals, HR should look at ways to help grow their own in-house capabilities without expending their budget on inflated salaries and contract rates.

The task for HR is to make sure the will, support and strategy is in place to build this culture of upskilling, and effectively communicate this strategy of staff development to potential recruits, and to their leaders.

HR News:

You Might Also Read:

UK Launches Long-Awaited Cyber Skills Strategy:

 

« Military Cyber Training Methods
Cyber Insurance Risks Are Moving Too Fast For Underwriters »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Mocana

Mocana

Mocana provides a software platform that allows you to develop, test and distribute more secure IoT devices and services.

ZyberSafe

ZyberSafe

ZyberSafe is an innovative Danish company specialized within building hardware encryption solutions.

OmniNet

OmniNet

OmniNet delivers the next generation of cybersecurity and is the only provider in the market to move the edge of small businesses to a virtual, omnipresent perimeter.

National Cyber Security Centre (NCSC) - Ireland

National Cyber Security Centre (NCSC) - Ireland

The National Cyber Security Centre (NCSC) is the operational side of the Department of Communications in regard to network and information security in the Republic of Ireland.

Threatspan

Threatspan

Threatspan is a cybersecurity firm helping shipping and maritime enterprises achieve and maintain nautical resilience in an age of increasing cyber threats.

Cycode

Cycode

Cycode is the industry’s first source code control, detection, and response platform.

CertiPath

CertiPath

CertiPath create products and services that ensure the highest levels of validation for digital identities that attempt to access customers’ networks.

Moviri

Moviri

Moviri combines security technology engineering, intelligence expertise and our data science DNA to help companies manage digital risk end-to-end.

Larsen & Toubro Infotech (LTI)

Larsen & Toubro Infotech (LTI)

LTI is a global technology consulting and digital solutions company with operations in 33 countries.

SOOS

SOOS

SOOS is the easy-to-integrate software security solution for your whole team. Build, catch, and fix vulnerabilities with SOOS Software Composition Analysis.

Tech Seven Partners

Tech Seven Partners

At TechSeven Partners, we provide a full suite of cyber security solutions for your business including network monitoring, onsite and cloud backup solutions, HIPAA or PCI compliance.

European Cybersecurity Competence Centre (ECCC)

European Cybersecurity Competence Centre (ECCC)

The ECCC aims to increase Europe’s cybersecurity capacities and competitiveness, working together with a Network of National Coordination Centres to build a strong cybersecurity Community.

Commvault

Commvault

Commvault's data protection and information management solutions help companies protect, access and use all of their data, anywhere and anytime.

MiC Talent Solutions

MiC Talent Solutions

MiC Talent Solutions provides recruiting, direct hire, augmented staff, and professional service contracting solutions for organizations searching for minority cybersecurity talent.

360 Advanced

360 Advanced

360 Advanced is a relationship-focused cybersecurity and compliance firm offering integrated compliance solutions customized to meet your business’ needs.

Vortacity Cyber

Vortacity Cyber

Vortacity is a boutique cybersecurity provider specializing in associations, nonprofits, and mission-based organizations.