While women comprise roughly half the world’s population, they make up less than a quarter of the global cybersecurity workforce—a stark statistic that underscores a critical gap in talent and perspective that the industry can no longer afford to ignore.
Key Takeaways
- According to the (ISC)² 2023 Cybersecurity Workforce Study, women make up 24% of the global cybersecurity workforce, a slight increase from 22% in 2021 but still significantly underrepresented compared to the 50% in the general population
- In the US, women represent only 22% of cybersecurity professionals per the 2023 ISC2 study, with entry-level roles at 26% but dropping to 19% in senior positions
- The Women in CyberSecurity (WiCyS) 2022 report indicates that 71% of women in cybersecurity have experienced gender-based discrimination, hindering career progression
- In the US cybersecurity workforce, Black or African American professionals comprise only 4.5% according to the ISC2 2023 study, significantly below their 13.6% in general population
- Hispanic or Latino individuals represent 7% of US cybersecurity workers per ISC2 2023, compared to 19% US population
- Asian professionals make up 14% of US cybersecurity workforce in 2023 ISC2 report, overrepresented relative to 6% population but concentrated in technical roles
- Women hold only 11% of CISO positions in US firms per Heidrick & Struggles 2023 survey of 300 companies
- Black executives in cybersecurity leadership roles at 3.2% according to Deloitte 2023 board survey
- ISC2 2023: Only 15% of cybersecurity managers are women globally
- Women in cybersecurity earn 96% of male counterparts' pay on average per Payscale 2023 data controlling for experience
- Black cybersecurity professionals experience 18% higher turnover rates than white peers per Deloitte 2023 retention study
- ISC2 2023: 35% of underrepresented groups report pay inequity vs 22% majority
- 67% of cybersecurity firms have implemented DEI training programs per ISC2 2023 study, leading to 12% increase in diverse hires
- WiCyS Mentorship program has supported 5,000 women since 2016, with 85% reporting career advancement
- CompTIA's cybersecurity scholarships for underrepresented groups awarded $1.2M in 2023
Cybersecurity DEI efforts show slow progress against deep inequity and retention challenges.
Equity Pay Retention
1Women in cybersecurity earn 96% of male counterparts' pay on average per Payscale 2023 data controlling for experience
Verified2Black cybersecurity professionals experience 18% higher turnover rates than white peers per Deloitte 2023 retention study
Verified3ISC2 2023: 35% of underrepresented groups report pay inequity vs 22% majority
Verified4WiCyS 2023 survey: 42% women leave due to lack of equity in promotions
Directional5CompTIA 2023: Retention of URM 72% vs 88% overall after 3 years
Single source6Ponemon 2023: Gender pay gap in cyber 7.2%, racial 12% for Black workers
Verified7McKinsey 2023: DEI programs boost retention by 25% in cyber teams
Verified8CyberSeek 2024: Women retention 78% entry-level drops to 65% senior
Verified9SANS 2023: 28% minorities cite lack of sponsorship for retention issues
Directional10Dark Reading 2023: Pay equity improves 5% with blind hiring in cyber
Single source11BLS 2023 median pay: Women security analysts $112k vs men $118k
Verified12Deloitte 2022: Hispanic retention 75%, due to cultural barriers
Verified13ISC2 2022: 40% women report burnout higher than men 32%
Verified14WiCyS 2022: Equity training reduces turnover 15%
Directional15CompTIA 2024: URM pay gap closes 3% with mentorship
Single source16Payscale 2024: Cyber pay gap women 4.8%, Black 9.5%
Verified17NCWIT 2023: Inclusive cultures retain 82% diverse talent
Verified18Ponemon 2022: 22% higher attrition for non-equitable pay bands
Verified19Forbes 2023: DEI-linked bonuses improve equity 10%
Directional20McKinsey 2022: Retention gap closes with flexible work 20%
Single source21Dark Reading 2024: 65% URM retention with ERGs
Verified22ENISA 2023: EU equity policies retain 70% women
Verified23Glassdoor 2023: Cyber equity ratings correlate 0.8 with retention
Verified24LinkedIn 2023: Diverse teams retain 30% longer in cyber
Directional25Harvard Business Review 2023: Pay transparency boosts equity 15%
Single source26Gartner 2023: 75% firms with DEI retain cyber talent better
VerifiedEquity Pay Retention Interpretation
Despite the industry's desperate need for more defenders, it appears cybersecurity is still patching its own human firewall with outdated equity policies, as evidenced by women earning less, underrepresented groups facing higher turnover, and everyone agreeing that fixing these glaring pay and promotion holes actually makes teams stronger and keeps them intact.
Gender Representation
1According to the (ISC)² 2023 Cybersecurity Workforce Study, women make up 24% of the global cybersecurity workforce, a slight increase from 22% in 2021 but still significantly underrepresented compared to the 50% in the general population
Verified2In the US, women represent only 22% of cybersecurity professionals per the 2023 ISC2 study, with entry-level roles at 26% but dropping to 19% in senior positions
Verified3The Women in CyberSecurity (WiCyS) 2022 report indicates that 71% of women in cybersecurity have experienced gender-based discrimination, hindering career progression
Verified4CompTIA's 2023 State of Cybersecurity report shows women hold 25% of cybersecurity certifications like Security+, but only 18% pursue advanced CISSP certification
Directional5A 2024 Deloitte survey found that 28% of women in cybersecurity plan to leave the field within two years due to lack of advancement opportunities compared to 15% of men
Single source6In Europe, ENISA's 2023 report states women comprise 19% of cybersecurity specialists, lowest in incident response roles at 14%
Verified7CyberSeek data from 2024 reveals US women in cybersecurity jobs grew by 12% year-over-year but remain at 23% of total workforce
Verified8SANS Institute 2023 survey: Only 20% of GIAC-certified professionals are women, despite 35% applying for entry courses
Verified9Forbes 2023 analysis: Women C-level cybersecurity execs in Fortune 500 firms at 12%, up from 8% in 2019
Directional10NCWIT 2022 scorecard: Women earn 21% of cybersecurity bachelor's degrees in US universities
Single source11Ponemon Institute 2023 study: 27% of female cybersecurity pros report imposter syndrome vs 18% males
Verified12Australian Cyber Security Centre 2023 stats: Women 18% of national cyber workforce, focused in policy roles at 32%
Verified13ISC2 2022 study: Globally, 26% of cybersecurity students are women, but retention drops to 21% post-graduation
Verified14WiCyS 2023 chapter survey: 65% of women members cite work-life balance as barrier, with maternity leave gaps
Directional15CompTIA 2024 trends: Women 29% of help desk roles transitioning to cyber, but only 16% in threat hunting
Single source16Dark Reading 2023 poll: 24% women in security operations centers (SOCs)
Verified17McKinsey 2023 tech report: Women 22% cybersecurity vs 30% overall tech
Verified18CREST 2023 UK survey: Women 17% of penetration testers
Verified19BLS 2023 data: US women information security analysts at 25%, growth rate 32% projected to 2032
Directional20ISC2 2021 study: Women 23% workforce, 71% feel under-mentored
Single source21WiCyS 2021 report: 19% women in executive cyber roles
Verified22CyberSeek 2023: 21% women in vulnerability management jobs
Verified23Deloitte 2022: 30% women entry-level, 15% manager level
Verified24ENISA 2022: EU women 20% cyber, 12% research roles
Directional25SANS 2022: Women 22% FOR508 course completers
Single source26Forbes 2022: Women CISOs up 10% in startups
Verified27NCWIT 2023: 24% women cyber undergrads
Verified28Ponemon 2022: 25% women report bias in promotions
Verified29CompTIA 2022: 26% women certified
Directional30Dark Reading 2022: 23% women in compliance roles
Single sourceGender Representation Interpretation
The cybersecurity industry has assembled a leaky pipeline where, despite a trickle of encouraging progress, women are still dramatically underrepresented, systematically filtered out as they advance, and made to feel so unwelcome that nearly a third plan to walk away—meaning we’re not just missing talent, we’re actively ejecting it.
Inclusion Initiatives
167% of cybersecurity firms have implemented DEI training programs per ISC2 2023 study, leading to 12% increase in diverse hires
Verified2WiCyS Mentorship program has supported 5,000 women since 2016, with 85% reporting career advancement
Verified3CompTIA's cybersecurity scholarships for underrepresented groups awarded $1.2M in 2023
Verified4CyberPatriot program increased minority participation by 25% in high school cyber competitions 2022-2023
Directional5Deloitte's Cyber Academy trained 2,500 diverse candidates in 2023, 40% placement rate
Single source6ISC2 Foundation's Women in InfoSec program reached 10,000 globally by 2024
Verified7NCWIT Aspirations in Computing engaged 35,000 girls in cyber tracks 2023
Verified8SANS Diversity Leadership Initiative certified 500 URM instructors 2023
Verified9WiCyS conferences 2023 had 3,500 attendees, 90% diverse
Directional10Ponemon 2023: 55% firms with ERGs see 18% better inclusion scores
Single source11McKinsey 2023: Inclusive hiring practices adopted by 62% cyber firms
Verified12Dark Reading 2024: 48% companies run unconscious bias training, reduces barriers 22%
Verified13ENISA 2023 EU Women4Cyber network 20,000 members
Verified14CompTIA 2024: Partnerships with HBCUs trained 1,000 Black students
Directional15ISC2 2022: One Million Certified initiative 30% diverse target met
Single source16WiCyS 2024: Corporate sponsors 100+, funding $5M DEI
Verified17CyberSeek 2023: Pipeline programs 50 states, 15% URM increase
Verified18BLS partnerships 2023: Apprenticeships 25% women/minorities
Verified19Forbes 2023: 70% top firms have DEI metrics in cyber KPIs
Directional20Gartner 2024: DEI software adopted by 40% cyber orgs
Single source21Harvard 2023 case studies: Inclusive cyber bootcamps 80% grad rate diverse
Verified22LinkedIn 2024: Cyber DEI learning paths 1M completions
Verified2352% of firms report microaggressions as top challenge per ISC2, addressed by 30% via initiatives
Verified24Ponemon 2024: Challenges: 45% lack of diverse pipeline, initiatives fill 20% gap
DirectionalInclusion Initiatives Interpretation
While promising numbers show the industry is finally learning to swim in the DEI pool, the real challenge is ensuring everyone feels welcome in the water and not just counted at the gate.
Leadership Representation
1Women hold only 11% of CISO positions in US firms per Heidrick & Struggles 2023 survey of 300 companies
Verified2Black executives in cybersecurity leadership roles at 3.2% according to Deloitte 2023 board survey
Verified3ISC2 2023: Only 15% of cybersecurity managers are women globally
Verified4WiCyS 2023: 8% women VP-level in cyber security firms
Directional5CompTIA 2023: Hispanic leaders 5% in cyber teams
Single source6CyberSeek 2024: 12% women in director-level cyber jobs US
Verified7SANS 2023: 10% minority CISSP leadership holders
Verified8Forbes 2024: Top 100 cyber firms, 14% female board members with cyber expertise
Verified9Ponemon 2023: 7% Black directors in security operations
Directional10McKinsey 2023: Women 13% cyber C-suite tech firms
Single source11Dark Reading 2023: 9% URM chief information security officers
Verified12Heidrick 2022: Global CISO women 18%, US 10%
Verified13ISC2 2022: 16% women directors
Verified14WiCyS 2022: 6% minority women execs
Directional15CompTIA 2024: 11% women security architects lead
Single source16BLS 2023 managers: 20% women computer security
Verified17Deloitte 2024: 4% Black cyber VPs
Verified18NCWIT 2023: Pipeline to leadership 12% women
Verified19Ponemon 2024: 14% diverse leadership improves incident response 20%
Directional20SANS 2024: 13% women lead forensics teams
Single source21CyberSeek 2023 exec: 17% women managers
Verified22Forbes 2023: Hispanic CISOs 4.1%
Verified23McKinsey 2024: 15% women cyber execs progress
Verified24Dark Reading 2022: 11% minority board cyber reps
Directional25ENISA 2023: EU cyber chiefs 9% women
Single sourceLeadership Representation Interpretation
Despite the proven advantage of diverse leadership—boosting incident response by 20%—the cybersecurity industry’s executive ranks remain a stubbornly homogeneous boys’ club where everyone seems to have misplaced the key to the talent vault.
Racial Ethnic Diversity
1In the US cybersecurity workforce, Black or African American professionals comprise only 4.5% according to the ISC2 2023 study, significantly below their 13.6% in general population
Verified2Hispanic or Latino individuals represent 7% of US cybersecurity workers per ISC2 2023, compared to 19% US population
Verified3Asian professionals make up 14% of US cybersecurity workforce in 2023 ISC2 report, overrepresented relative to 6% population but concentrated in technical roles
Verified4WiCyS 2023 intersectional data: Black women only 1.2% of cyber workforce, facing double bias
Directional5CompTIA 2023: Native American/Alaska Native 0.8% in cybersecurity
Single source6BLS 2023: Black information security analysts 5.1%, Hispanic 8.2%
Verified7CyberSeek 2024 US heatmap: Underrepresented minorities (URM) 15% total cyber jobs
Verified8Deloitte 2023 diversity report: Black execs in cyber firms 3%
Verified9NCWIT 2023: Hispanic women 2% cyber graduates
Directional10Ponemon 2023: 6% Asian women in leadership cyber roles
Single source11SANS 2023 survey: 4.2% Black GIAC holders
Verified12Dark Reading 2024: Native Hawaiian/Pacific Islander 0.5% cyber pros
Verified13McKinsey 2023: US Black cyber workforce 4.8%, stagnant since 2019
Verified14ISC2 2022 US: Multiracial 2.1%
Directional15CompTIA 2024: Hispanic growth 9% YoY but still 6.5%
Single source16WiCyS 2022: Asian 12%, Black 3.5% women total
Verified17BLS 2022: Two or more races 3% security analysts
Verified18CyberSeek 2023: Black 4.7% in entry-level cyber
Verified19Deloitte 2022: Hispanic 7.5% mid-level
Directional20ENISA 2023 EU: Non-white 11%
Single source21Forbes 2023: Black CISOs 2.8% Fortune 500
Verified22NCWIT 2022: Black computing degrees 4%, cyber subset 3.2%
Verified23Ponemon 2022: Hispanic 6.8%
Verified24SANS 2022: Asian 15% advanced certs
Directional25Dark Reading 2023: URM 14.2% SOC analysts
Single source26McKinsey 2022: Black retention 68% vs 85% white
VerifiedRacial Ethnic Diversity Interpretation
The cybersecurity industry is diligently guarding digital borders while inadvertently constructing its own demographic fortress, leaving vast pools of talent standing outside the gates.
Sources & References
- Reference 1ISC2isc2.orgVisit source
- Reference 2WICYSwicys.orgVisit source
- Reference 3COMPTIAcomptia.orgVisit source
- Reference 4DELOITTEwww2.deloitte.comVisit source
- Reference 5ENISAenisa.europa.euVisit source
- Reference 6CYBERSEEKcyberseek.orgVisit source
- Reference 7SANSsans.orgVisit source
- Reference 8FORBESforbes.comVisit source
- Reference 9NCWITncwit.orgVisit source
- Reference 10PONEMONponemon.orgVisit source
- Reference 11CYBERcyber.gov.auVisit source
- Reference 12DARKREADINGdarkreading.comVisit source
- Reference 13MCKINSEYmckinsey.comVisit source
- Reference 14CREST-APPROVEDcrest-approved.org.ukVisit source
- Reference 15BLSbls.govVisit source
- Reference 16HEIDRICKheidrick.comVisit source
- Reference 17PAYSCALEpayscale.comVisit source
- Reference 18GLASSDOORglassdoor.comVisit source
- Reference 19LINKEDINlinkedin.comVisit source
- Reference 20HBRhbr.orgVisit source
- Reference 21GARTNERgartner.comVisit source
- Reference 22USCYBERPATRIOTuscyberpatriot.orgVisit source
- Reference 23ISC2FOUNDATIONisc2foundation.orgVisit source
- Reference 24APPRENTICESHIPapprenticeship.govVisit source
- Reference 25LEARNINGlearning.linkedin.comVisit source