AI skills gap in cyber workforce pushes employers to get creative, literally

Creativity, communication, and curiosity are just some of the soft skills that employers should value in their cyber workforce, according to research from ISC2. Soft skills – or traits that improve our ability to have strong relationships and teams – might be the solution to the growing cybersecurity workforce shortage and the growing skills gap as AI brings unpredictability and change to the profession. 

The 2024 ISC2 Cybersecurity Workforce Study, which surveyed nearly 16,000 cybersecurity professionals worldwide, reveals an industry at a pivotal moment—navigating both economic pressures and AI’s transformative potential. As organizations adapt to this new reality, hiring managers are shifting their priorities from specialized technical knowledge to abilities that complement AI systems.

Resource Shortages Intensify

Budget constraints have hit cybersecurity teams hard. In 2024, 37% of organizations faced budget cuts—a 7% increase from 2023—while 25% experienced layoffs, up 3% from the previous year. These cuts come at a particularly challenging time as cybersecurity threats continue to multiply.

The global cybersecurity workforce grew by only 0.1% in 2024, marking a significant slowdown from the 8.7% growth seen between 2022 and 2023. Meanwhile, the workforce gap—the difference between the number of professionals needed and those available—grew by 19.1% to nearly 4.8 million people globally.

“Almost 60% of respondents agree that skills gaps have significantly impacted their ability to secure the organization, with 58% stating it puts their organizations at a significant risk,” the report notes.

Shifting Priorities in an AI-Driven World

As AI advances, hiring managers are rethinking what skills matter most. Rather than focusing on technical specializations, they’re prioritizing transferable skills like problem-solving, teamwork, and communication.

“The top skills hiring managers are looking for today are strong problem-solving, teamwork, collaboration, curiosity and communication. These skills ranked higher than technical skills like cloud computing security, risk assessment, analysis and management and AI,” according to the study.

This shift reflects uncertainty about AI’s future impact on cybersecurity roles. While 51% of professionals believe AI will make some cybersecurity skills obsolete, two-thirds remain confident that their expertise will complement rather than be replaced by AI technology.

Professionals Adapt Career Strategies

Cybersecurity professionals are adjusting their career strategies in response to economic pressures and technological changes. The study found work-life balance now ranks as professionals’ top career priority (43%), followed by financial success (38%) and protecting organizational assets (30%).

To future-proof their careers, 73% of professionals are expanding their cybersecurity knowledge base, 52% are focusing on becoming more strategic contributors, and 48% are building AI-related skills.

Interestingly, the study found regional differences in career motivations. North American professionals focus more on personal fulfillment (45%) and quality of life (26%), while professionals in Latin America and the Middle East/Africa prioritize attaining executive positions (35% and 36% respectively) and becoming industry thought leaders.

Dual Impact of Generative AI

AI presents both opportunities and challenges for cybersecurity teams. While 45% of teams have already integrated generative AI into their tools, primarily for administrative tasks and report writing, they also face new security concerns as AI adoption spreads throughout their organizations.

“53% worry it will open us up to greater risks,” the report states, while 54% have already encountered data privacy and security issues due to organizational AI adoption.

Nevertheless, cybersecurity professionals remain optimistic about AI’s potential benefits. Most expect it to improve threat detection, provide easier access to information, and reduce time spent on routine tasks. Looking ahead, 68% believe they will effectively use AI in their roles within two years, and many anticipate it will help address staffing shortages and skills gaps.

Future Outlook

The study identifies a critical need for organizations to develop comprehensive AI strategies, with nearly half of respondents reporting their organizations currently lack clear direction on AI implementation.

Despite current economic challenges, the message from cybersecurity professionals is clear: continued investment in cybersecurity talent and skills development remains essential, especially as organizations navigate the transition to an AI-driven future.

“Organizations should not lose sight of the gains the workforce has made over the last several years,” the report concludes. “These activities cannot be viewed as luxuries for when times are good but rather as fundamental, critical elements for building and maintaining resilient cybersecurity teams.”