5 Tips for Recruiting and Retaining Cybersecurity Talent

There will be 3.5 million open cybersecurity positions by 2025, according to Cybersecurity Ventures, a global think tank covering the global cyber economy. With cyberattacks on the rise, businesses are spending more and more on risk management. As reported by CSO, tech research firm Gartner estimates that spending on security risk management will total $172 billion in 2022.

It's in the best interest of companies to come up with a game plan for recruiting and retaining the best cybersecurity talent. Recently, Microsoft announced a plan to close the cybersecurity skill gap through targeted investments in 23 countries across the globe.

Wondering what your company can do to attract talent in this field? Here are five tips.

1. Prioritize diversity and inclusion initiatives

Bolstering your D&I strategy, both internally and externally, is crucial for closing the cybersecurity workforce gap. A 2021 report from ISC2 surveyed cybersecurity professionals across North America and the U.K. Only 24% of survey participants were female, and 28% were non-Caucasian.

Without inclusive initiatives to recruit and retain a diverse pool of professionals, talent is being left on the table.

What should diversity initiatives look like for cybersecurity recruiting? ISC2 uncovered several solutions, many of which were focused on employee equity and establishing clear hiring team practices.

By leaning into initiatives such as flexible work schedules, mentorship opportunities, and the elimination of pay and promotion gaps, you're opening up your talent pool to a wider range of qualified candidates.

For more tips on how to incorporate diversity into your recruitment tactics, read our article, “5 Steps to a Successful Diversity Recruitment Program.”

2. Leverage untapped recruitment resources

One of Microsoft’s primary cybersecurity recruitment initiatives in the U.S. is to mobilize community colleges and “enlist them in the cybersecurity battle.”

Microsoft cites multiple reasons why community colleges are a great place for recruiting, including:

• They are ubiquitous, with approximately 1,044 located in every state and territory in the U.S.
• Community colleges serve students at multiple stages in their education—from recent high-school graduates to older adults pivoting career paths. Recruiting at community colleges allows you to target a wide range of ages and professional levels.
• Community colleges are diverse in terms of race, ability and gender.

There are several organizations that help companies connect with previously untapped talent. For example, Circular.io is a Madrid-based startup that maintains a network of tech candidates who have been recommended by in-house recruiters. In the U.S., Handshake is a popular recruiting tool for companies looking to hire recent college graduates.

3. Offer training and career progression opportunities

ISACA’s “State of Cybersecurity 2022” report identified some of the biggest skill gaps for today’s cybersecurity professionals. These skill gaps included cloud computing (52%), security controls (34%) and coding skills (33%).

In the same report, 47% of respondents cited a lack of promotion and development opportunities as a top reason a cybersecurity professional might leave their job:

To develop and grow the skills of your current cybersecurity employees, consider implementing new training opportunities or building upon existing professional development initiatives. In addition, you make sure you advertise these training opportunities as part of your digital communications and recruitment strategy.

4. Make cybersecurity a priority for senior leadership

To get the resources you need to build and retain a strong cybersecurity team, you need to garner the support and involvement of senior leadership. Make sure your C-Suite understands the risks associated with cyber threats and collaborate with them on a holistic plan to prevent and address those security concerns.

Download our whitepaper, “Cybersecurity and the C-Suite,” for a comprehensive breakdown of:

• Current types of security threats
• Why virtual working leads to increased cybersecurity risks
• Why ransomware attacks are happening
• Tips for ensuring your company is protected

5. Keep your communication strategy consistent

When recruiting and retaining employees, don’t underestimate the value of a coherent digital and in-person narrative.

Put your company culture and values on full display with compelling communications, intelligent digital experiences and performance marketing strategies. Then, make sure these same messages are being communicated to your internal teams.

Learn how to create stronger connections with a Connected Content™ approach to digital storytelling.

Contact Investis Digital

If you’re ready to redefine how you build connections with cybersecurity talent, reach out to Investis Digital. Our HR & Talent Acquisition solutions are designed to help you secure the talent you need, while keeping your existing team engaged and inspired.