We often see evidence of the skills gap as Kaspersky. In our 2019 survey, one in three Chief Information Security Officers (CISOs) say they find it hard to recruit the cybersecurity people they need<\/a>.<\/p>\n Digitization, sensitive data and privacy concerns mean businesses are crying out for technical specialists, managers, CISOs and people with cross-functional expertise.<\/p>\n The problem is not lack of ability in the existing workforce, nor lack of promising young people wanting to work in the field. The hard-to-fill roles tend to be those in cybersecurity areas with a lower profile \u2013 the less talked about specializations.<\/p>\n In a cybersecurity career, choosing the right specialism and the right skills to develop will give you an earning edge and greater choice among employers. From our experience at Kaspersky, and what we\u2019ve learned from others across the industry, these are the areas where skill shortages are most pronounced.<\/p>\n Specializing in cybersecurity and the law covers privacy, compliance and data protection legislation. These specialists, such as privacy officers and data protection officers, should be equally skilled in law and cybersecurity technology. They help companies find ways to organize digital data storage, processing and protection that comply with legislation.<\/p>\n The demand for cybersecurity and law specialists will grow in areas like the Internet of Things<\/a> (IoT), as privacy and personal data regulation increasingly cover these services.<\/p>\n Specialists in this area tend to be more skilled in law than technology. For example, data protection officers can usually tell the company how it should<\/em> organize data processing and protection, but they can\u2019t always say how to achieve<\/em> that. When communicating with IT specialists, they need to know how to speak their language.<\/p>\n In the US, compliance and data protection officers earn an average salary of 81,000 US dollars<\/a>, according to Glassdoor, while ZipRecruiter says privacy officers make 113,000 US dollars<\/a>.<\/p>\n Cybersecurity architects design and test cybersecurity systems. It\u2019s a more well-known role, but demand is still outstripping supply. Companies want experts who can see the whole picture and connect all the pieces to make one mechanism that works.<\/p>\n Cybersecurity architects should know enough about all aspects of cybersecurity in their company, from endpoint protection<\/a> to anti-targeted attack<\/a> mechanisms. They don\u2019t need to know as much detail as dedicated experts, but they need to know enough to build proper protection systems, such as how parts of the infrastructure work together. They also need strong management skills.<\/p>\n The rewards reflect the shortfall of people with all these skills \u2013 Payscale says IT security architects in the US earn an average salary of US$123,000<\/a>.<\/p>\n While fewer workplaces need more exclusive specializations like big data analysis, there\u2019s still a lack of skilled people.<\/p>\n Big data analysts build mathematical models to detect anomalies. If a company needs advanced-level cyber protection or offers specific cybersecurity services like system integration, they\u2019ll probably need a big data analyst.<\/p>\n Ecommerce, banks and digital services also use big data analysis and math modeling, as does any business that holds data about user behavior and events. To detect behavior anomalies in constant white noise, and create algorithms to describe what happens in response, you\u2019ll need strong analytical, mathematical, statistical and modeling skills, and in-depth knowledge of cyber-threats and attacks.<\/p>\n In the US, you could earn $117,000 as a cybersecurity data scientist<\/a>.<\/p>\n There are still opportunities and room for improvement in traditional and common specializations.<\/p>\n Employees in security operation centers (SOC)<\/a> remain in high demand, but the focus is changing. As the cybersecurity industry has learned, no organization can prevent all attacks and breaches, detection and response are now more central than threat prevention. Companies need to be able to track attacks and breaches early and minimize damage.<\/p>\n This means SOCs need specialists who can detect threats and know what to do next. They\u2019ll know how to create detection rules and algorithms for detecting attacks and incorrect user behavior.<\/p>\n Managers in cybersecurity often lack \u2018soft skills\u2019 like communication, leadership, negotiation and business sense. Some 70 percent of IT decision-makers notice a communication skills gap among cybersecurity graduates<\/a>.<\/p>\n Cybersecurity managers should be able to organize their department\u2019s work to meet business demands. They should be persuasive and able to speak in the language other parts of the business use. Leadership skills are one way to stand out from the crowd; it looks like most cybersecurity professionals don\u2019t yet consider leadership skills a priority, even in top management positions. Kaspersky\u2019s 2019 CISO survey found only two percent put leadership in a successful CISO\u2019s top three skills<\/a>.<\/p>\n As university programs are limited and academic, self-education is vital. Students should choose one or more specialism to develop. They should find out what skills and knowledge it requires, and proactively develop those using the many educational materials and communities out there.<\/p>\n When you start work, CPD (continuing professional development) is the mindset to adopt. Taking on tasks that develop new skills will help your career, as well as avoiding too much routine, which can lead to burnout.<\/p>\n \u2018Learn by doing\u2019 is still the most effective way to gain knowledge and skills. When you ask your peers and managers to involve you in activities around the knowledge and skills you need, you\u2019ll learn quickly and gain confidence while distributing the workload. Everybody wins.<\/p>\n Employers can also help. Many companies, especially IT vendors, are investing in employee education, training and development around cybersecurity. Employees need to understand the business\u2019s priorities and choose a direction they want to develop in.<\/p>\n Building a career means not only developing skills and knowledge but making these visible above and beyond daily routines. This means having the courage to put yourself forward \u2013 perhaps the most valuable skill of all<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" Cybersecurity has long attracted top talent, but employers say some skills are hard to find. What\u2019s the smartest next move for your cybersecurity career?<\/p>\n","protected":false},"author":2537,"featured_media":31942,"template":"","coauthors":[3551],"class_list":{"0":"post-31941","1":"emagazine","2":"type-emagazine","3":"status-publish","4":"has-post-thumbnail","6":"emagazine-category-cybersecurity","7":"emagazine-category-talent-business","8":"emagazine-tag-careers","9":"emagazine-tag-future-of-work","10":"emagazine-tag-professional-advice","11":"emagazine-tag-skills"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/secure-futures-magazine\/where-work-cybersecurity\/31941\/"}],"acf":[],"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/emagazine\/31941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/emagazine"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/emagazine"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2537"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/31942"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=31941"}],"wp:term":[{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/coauthors?post=31941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Why is there a skill shortage in cybersecurity?<\/h2>\n
1.\u00a0\u00a0\u00a0 Be equally skilled in tech and legal<\/h2>\n
2.\u00a0\u00a0\u00a0 Be able to connect all the pieces<\/h2>\n
3.\u00a0\u00a0\u00a0 Be able to detect anomalies in constant white noise<\/h2>\n
![\"where](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2019\/12\/25140514\/076_where_work_cybersecurity_inline-1-1024x792.jpg\")
<\/p>\n4.\u00a0\u00a0\u00a0 Be strong on detection and response<\/h2>\n
5.\u00a0\u00a0\u00a0 Be someone with soft skills<\/h2>\n
Filling the skilling<\/h2>\n