New research conducted by ISC2 sheds light on the state of gender diversity within cybersecurity teams, highlighting significant disparities and challenges faced by women in the industry.

According to the study, only 4% of cybersecurity teams have a majority of women, with a staggering 11% lacking any female representation at all. The global average suggests that 23% of teams are women, indicating a persistent gender gap in the field.

The research was gathered from 2,400 women participants, out of a total of 14,865 global participants.

Job title distribution among women participants revealed that 57% hold formal security titles, while 43% hold informal titles such as IT Manager or IT Director. In comparison, men participating in the study hold formal security job titles at a higher rate of 63%.

The study also delved into the issue of ethnicity within cybersecurity, highlighting salary discrepancies based on gender and ethnicity. Women participants globally earned an average salary of $109,609 (£87.8K), compared to $115,003 (£92.2K) for men, indicating a difference of $5,400 (£4.3K). For participants of colour in the US, men earned an average of $143,610 (£115.1K), while women of colour earned $135,630 (£108.7K), reflecting a significant gap of nearly $8,000 (£6.4K).

Furthermore, the research uncovered that 29% of women felt discriminated against in the workplace, compared to 19% of men. Women of Black or African descent in certain regions reported the highest levels of discrimination.

“It’s great to see incremental progress of younger women entering cybersecurity, however, it’s not enough and more needs to be done. We must continue to build a culture for all women that creates a sense of belonging that results in the retention of women in cybersecurity careers,” said ISC2 CEO Clar Rosso, CC. 

Recommended reading

• 75% of UK Businesses Failing to Uphold Cybersecurity Best Practices
• Cybersecurity Readiness is Down Amid Rampant Attacks
• Cybersecurity Firm Acumen Enters UK Market With Glasgow Office

“Research reveals that the most engaged women in cybersecurity work at organisations that invest time and resources into diversity, equity and inclusion (DEI) initiatives such as offering competitive pay, hosting mentorship programs and establishing an inclusive culture that fosters professional development opportunities.”

Looking ahead, 69% of women respondents expressed that diversity, equity, and inclusion will become increasingly important for their security teams over the next five years, compared to 55% of men.