Around 13% of the cybersecurity workforce considers themselves neurodivergent, according to a study from ISC2, the cybersecurity training non-profit.

Neurodivergence – when someone’s brain processes, learns, or reacts differently from what is considered ‘neurotypical’ – can be difficult to get a diagnosis for. Ranging from ADHD to Autism, awareness for neurodivergence is expanding, especially in the tech sphere.

While not representing a large proportion in ISC2’s study, participants identifying as neurodivergent hold roles in some specialised areas of cybersecurity at higher rates than ‘neurotypical’ people.

The research found that 6% of neurodivergent respondents work in data protection and privacy, compared to 5% of the overall respondent base. Meanwhile, 5% of neurodivergent participants deal with cyber threat intelligence compared to just 3% of the entire respondent base.

The research found a similar pattern for those working in cryptography and communications security roles – 3% of neurodivergent participants, compared to 2% of all survey participants.

ISC2 also found that fewer neurodivergent people work in secure operations roles compared to the overall average (5% vs 7%), and are less likely to be in cybersecurity management roles (12% vs 14%).

When looking at job satisfaction, we see more of a divergence, however.

Neurodivergent workers expressed lower levels of job satisfaction (60%) compared to those who did not consider themselves neurodivergent (68%), and lower than the overall average (66%).

Neurodivergent people also said they struggle more to be authentic at work, or present as their full self in their jobs (44%), compared to those who are not neurodivergent (31%).

For neurodivergent and neurotypicals, being yourself at work was a major factor in job satisfaction, with satisfaction levels 19% higher for those who felt like they could be themselves at work.

Recommended reading

• Scottish Enterprise is Boosting Neurodiversity in Cybersecurity
• Navigating Scotland’s Skills Gap with Neurodiversity and Inclusion
• This Scots Tech Entrepreneur Has a Superpower—Her Neurodivergence

People who considered themselves neurodivergent did however, note positive perceptions of the cybersecurity field. Nearly three in four (73%) neurodivergent respondents agreed that cybersecurity is a well-suited field for them.

Similarly, 68% of neurodivergent people agreed that cybersecurity was welcoming to them. However, non-neurodivergent respondents perceive cybersecurity to be less supportive of neurodivergent people, with less than half (45%) saying it was well suited to neurodivergent workers, and 49% saying it was welcoming.

Overall, 74% said than an inclusive environment is essential for their team to succeed.

ISC2 also provided some recommendations to support neurodiverse staff in cybersecurity.

This includes educating all staff about neurodiversity, offering mentoring and support opportunities, providing flexible work options, and adapting workspaces to sensory needs and assistive technologies.

Facilitating choices when it comes to learning and communication styles can also promote a more inclusive workforce, as well as encouraging open communication around neurodiversity.