Cyber security's gender divide

It is reported that the number of women working in cyber security has improved over recent years, however, compared to men working in the industry, the deficit is vast. According to a LinkedIn report, women in the UK make up just 17.5% of the cyber security workforce, while the ISC2 report that women make up approximately 20–25% of global cyber workforce.

This underrepresentation is a concerning trend in technology and engineering and it is something that hinders progress and innovation. Cybercrime can be committed by anyone, and so the diversification of voices within the industry is paramount to enable different perspectives which inherently enhances the effectiveness and creativity of security solutions.

Challenges in the industry

Women entering or working in cyber security often encounter a range of challenges that contribute to their underrepresentation. Gender bias and stereotyping are common issues, with many women reporting that their skills and knowledge are often underestimated simply by virtue of their gender.

Dr Andrea Cullen, CEO and Co-Founder of CAPSLOCK, emphasises that CAPSLOCK’s mission is to, “remove barriers for individuals who want to enter the cyber security industry, no matter their academic background, work experience, or financial status.” CAPSLOCK focuses on promoting diversity across all aspects, including background, socio-economics, gender, and ethnicity.

This bias can manifest in various ways, from being overlooked for promotions to facing scepticism when presenting technical solutions. Also, a lack of representation in leadership roles exacerbates the problem by creating a visibility gap, making it difficult for young women to see cyber security as a viable and attractive career path. The persistent pay gap is another challenge, with women in cyber security often earning less than their male counterparts, even when holding equivalent positions.

Dr Cullen points out the importance of leadership in changing language and processes for recruitment to encourage more women into the field, “this takes courage and is the biggest challenge we face.”

CAPSLOCK’s educational approach aims to develop both technical and life skills, with flexible study options and payment plans that remove financial barriers, empowering women to thrive in the industry. However, success is not only measured by numbers but by the quality of outcomes for women. Dr Cullen notes that while salary increases are one metric, “their growth in confidence is arguably the most impactful and inspiring result we [CAPSLOCK] celebrate.”

The importance of diverse perspectives

The argument for greater female representation in cyber security extends beyond fairness and equality. Diverse perspectives are paramount in an industry that thrives on innovation and problem-solving. It has been shown that teams that include women are often better equipped to handle the complex and evolving challenges of cyber security. Women tend to bring different approaches to risk assessment and management, leading to more comprehensive strategies that consider a wider range of scenarios and outcomes.

In addition to enhancing problem-solving and risk management, diverse teams are more innovative, and in a field like cyber security, where staying ahead requires constant innovation, the inclusion of women’s perspectives can drive the development of new, more effective security technologies and protocols.

Dr Cullen highlights a particular success – showing how so many skills can be transferrable: “Nicole, a former jeweller without a technical background, has excelled in cyber security thanks to her creativity and other transferable skills, [this] highlights the impact of accessible pathways into the industry.”

Women often bring a strong sense of empathy and understanding of user behaviour to a role, which is an essential component in designing security solutions that are not only effective but also user-friendly.

Working together for a better future

Despite the challenges, there are growing opportunities for women in cyber security, and educational and training programmes, such as those offered by CAPSLOCK, are helping to break down barriers and provide women with the skills they need to enter the field. These programmes not only offer technical training but also create environments where women can gain confidence and build networks that support their career growth.

The underrepresentation of women in cyber security is a challenge that affects the entire industry. However, true progress will only be achieved when men and women work together with mutual respect, recognising that all perspectives matter. As Dr Cullen states: “When women thrive in their roles, they become the strongest advocates for others.”

New cyber security graduate scheme to encourage cyber talent

Things are improving, however, as the UK government is set to launch two new cyber security offerings to its Fast Stream graduate scheme.

The schemes are expected to run alongside the existing Digital, Data Technology, and Cyber (DDTC) scheme and will split into a digital, data and technology pathway, and a cyber security pathway.

Kevin Curran, IEEE senior member and professor of cyber security at Ulster university, said: “Recruiting cyber security specialists is particularly challenging due to the rapid evolution of the industry, high demand across all sectors, and the need for a diverse set of up-to-date skills.

“A previous government report indicated that the UK’s cyber sector had grown by 10% back in 2013. However, for growth industries like cyber security, there is simply not enough staff to meet current sector challenges. According to GOV UK’s own sources, 50% of all UK businesses have a basic cyber skills gap, and that an average of 21,600 new recruits are needed annually to meet current demand ... There needs to be a stronger pipeline and steady supply of talent, especially in the public sector, perhaps this Fast Stream holds the answer.”

By actively working to close the gender gap, the cyber security field can benefit from the creativity, innovation, and diverse approaches that both men and women bring to the table. This diversity is essential not only for building stronger, more resilient security solutions but also for ensuring that the industry reflects the society it aims to protect.