Cybersecurity Talent Gap Widens as AI Reshapes Workforce Demand, Accenture Finds

Organisations worldwide are facing a growing cybersecurity talent crisis as rapid advances in artificial intelligence (AI) outpace the availability of skilled professionals, according to a new report by Accenture.

The study reveals that while nearly six in 10 cybersecurity roles now require a combination of technical expertise and business leadership skills, only 40% of the current talent pool possesses this integrated capability.

The report, titled ‘Reinventing the Cyber Workforce: Solving the Talent Imbalance’, analysed more than 5,50,000 cybersecurity job postings and professional profiles across multiple regions.

It concludes that the industry’s biggest challenge is no longer just a shortage of professionals, but a widening mismatch between employer expectations and workforce capabilities.

Demand for AI-related cybersecurity skills has more than doubled since 2020, with hiring requirements now outpacing talent availability, particularly in the United States. 

The report warns that the rapid adoption of AI is expected to further intensify the imbalance unless organisations rethink how they build and develop cyber talent. The research also found that 59% of cybersecurity jobs now require professionals who can combine deep technical expertise with strategic business capabilities, such as translating business strategy into secure architecture, communicating cyber risks to leadership, and guiding cross-functional decisions. 

However, only 40% of candidates currently demonstrate this blended skill set.

Beyond hiring challenges, organisations are also grappling with retention. The average tenure of cybersecurity professionals has fallen to 1.8 years, while more than half of respondents reported experiencing frequent work-related stress. Despite these pressures, fewer than three in 10 organisations invest in structured upskilling programmes to develop cyber capabilities internally.

The report further notes that existing education and early-career pathways continue to focus heavily on technical knowledge, leaving professionals underprepared for business integration, architecture, and strategic decision-making responsibilities increasingly expected by employers.

Commenting on the findings, Gautam Kapoor, Managing Director and Lead for Cybersecurity, Accenture in India, said the cybersecurity landscape is evolving faster than workforce capabilities.

“India’s cybersecurity workforce is facing a widening skills gap as the threat and technology landscape evolves rapidly, particularly with AI reshaping both attack and defence models.”

Harpreet Sidhu, Global Lead, Accenture Cybersecurity, said organisations must pay equal attention to workforce readiness alongside technology investments.

“Every organisation is asking whether its defences are sufficient. Too few are asking whether their people are adequately trained, have the right role clarity, and are equipped with the right tools and information to execute their roles. AI will play a critical role in cyber defence, but it must be governed by human judgement, clear authority, and practiced execution, hence human in the lead.”

He added that organisations need to “build a cyberAI-ready workforce that is enabled with the skills, judgment and operating models that let people make better decisions faster”, warning that “the capability gap isn’t theoretical. It's the reason many incidents become crises”.

Echoing the concern, Vikram Desai, Global Cybersecurity Strategy and Risk Lead, Accenture Cybersecurity, said organisations need to rethink how they approach talent development.

“The cyber talent gap won’t be solved by hiring faster. The data is clear: most open roles now require someone who can translate risk into business decisions, not just execute technical controls. The pipeline problem and the skills problem are the same problem. Solving one without the other just produces talented people in the wrong role,” Desai said.

To address the growing gap, Accenture recommends that organisations invest in long-term internal capability building through structured learning programmes, redesign cybersecurity roles to encourage cross-functional career progression, and use AI to augment human capabilities rather than replace them. 

The report also calls for greater emphasis on AI-enabled operating models, simplified security architectures, and stronger ecosystem partnerships, while maintaining human oversight in cybersecurity decision-making.