32% of cybersecurity leaders considering quitting their jobs

32% of CISOs or IT Security DMs in the UK and US are considering leaving their current organization, according to a research from BlackFog. Of those considering leaving their current role, a third of those would do so within the next six months.

This research, which explored the frustrations and challenges faced by cybersecurity professionals also highlights the impact that cyber incidents have on turnover and job security. It revealed that of those who had been a CISO or IT security leader at a previous organization, 41% either left, or were let go, due to an attack or data breach.

When asked about the aspect of their role that they disliked most, 30% cited the lack of work-life balance, with 27% stating that too much time was spent on firefighting rather than focusing on strategic issues.

However, their role in keeping their organization safe from cyberthreats was clearly valued, with 44% of respondents stating that the most enjoyable aspect of the job is being the company ‘protector’ and having the ability to keep everyone working securely.

“Cybersecurity expertise has never been more in demand; however, these numbers highlight a serious issue with retention in the field. Board members and the C-Suite must recognize that keeping a strong team of IT security leaders is essential for their company’s safety and security,“ said Dr. Darren Williams, CEO, BlackFog.

“Recruiting is a challenge globally, and with stiff competition to attract the best talent, organizations need to address the well-being and work-life balance issues that have persisted across the industry. Organizations do not want to run the risk of having a lapse in their security posture in the wake of losing their CISO.”

The struggle to keep up with new cybersecurity approaches

Escalating cybersecurity threats are driving new innovations to help organizations improve their cybersecurity posture, however, findings show:

• 52%, admitted that they are struggling to keep up to date with new frameworks and models such as zero trust.
• A further 20% felt that keeping the skill levels of their teams in line with these was a ‘serious challenge’.
• 54% also felt that they weren’t able to keep up to date with information on the latest cybersecurity solutions such as anti data exfiltration.
• 43% of respondents found it difficult to keep pace with the newest innovations in the cybersecurity market. This number varied by country, with 49% of US respondents agreeing versus 36% in the UK.

Aligning with Board expectations

There were several key positives reflected in this study, especially in the realm of Board’s expectations for the respondents. Findings show that 75% agree that there is a full alignment between the Board’s expectations of what they can achieve in their role and what they are equipped and able to deliver. In fact, 64% of respondents were able to complete their priority tasks within the first six months of their starting date. This may be down to the fact that, on average, 27% of IT spending goes towards the security budget.

“These results show us that while the security leaders’ role comes with huge challenges and enormous pressures, there are encouraging signs that Boards are listening to their needs and there is, broadly, a strong level of alignment in terms of their expectations and leaders’ ability to deliver on these,” said Williams.

“Adapting to a fast-changing landscape is key, however, and organizations need to ensure that their security teams are given the time and resources to devote to keeping pace with the latest thinking, frameworks and innovations designed to lower their cyber risk.”