The information security industry is facing an unsustainable inflationary spiral, particularly as the skills gap continues to widen.
Speaking at RSA Conference Europe 2012 in London this week, John Colley, managing director, EMEA for (ISC)2, said that in a normal economic cycle, high salaries would attract newcomers to fill the growth in demand and allow the development of a healthy job market. However the newcomers to information security face too many barriers to entry, while threats rise to fuel demand for information security and the professionals that can deliver it.
He said: “Employers today are struggling, taking up to six months to fill positions. They are looking for people who have a basic understanding of security concepts and experience. Newcomers are not being provided with the opportunities to develop either.”
Reviewing the (ISC)2 Global Information Security Workforce Study, Colley said that the research by industry analysts has accurately projected growth since 2004 and anticipates the workforce to nearly double by 2015. “This is a scary statistic when you ask yourself where all the new people are going to come from,” Colley said.
“Full employment is both good and bad news for the profession. On the one hand, it offers people with the right qualifications, experience and skills, opportunities for career advancement, but on the other, it causes excessively high salary expectations. Short-staffed teams take on extra workload and stress; there is little time for professional development, and the risk of employees taking on tasks and responsibilities that may not be at par with their abilities rises.”
He said that the solution will require a concerted effort to develop a healthy job market for the profession, with support both for young people to move into the field and the hiring managers who at the moment have no way of identifying aptitude in undeveloped talent.
“We are seeing a lot of talk about the skills gap and many efforts to raise interest in the opportunities. But what are we doing with these people once we get their interest? There isn't at the moment the support mechanism available to get them working productively. It's a big problem that I am not sure is well understood,” said Colley.
“We don't yet have all the answers. Employers will not be able to focus on experience alone for much longer; however, employers will also need support in developing the workforce and the healthy job market required.”