Cybersecurity skills gap threatens canada’s defenses

Canada is grappling with a critical shortage of cybersecurity professionals – a gap projected to swell to 100,000 by 2035, jeopardizing the nation’s ability to withstand increasingly sophisticated cyberattacks. The issue isn’t just numbers; it’s a deeply rooted problem of diversity and access, experts warn.

A critical shortfall: 25,000 to 30,000 professionals needed now

Official estimates indicate a shortfall of between 25,000 and 30,000 qualified cybersecurity experts across the country, a figure poised to explode as technological threats accelerate. This deficit directly weakens Canada’s national security posture, exposing it to vulnerabilities it simply can’t readily address.

Recruitment efforts and shifting priorities

While Immigration, Refugees and Citizenship Canada (IRCC) has adjusted the Express Entry system, prioritizing healthcare and francophone immigration over the tech sector, cybersecurity remains a surprisingly persistent high-demand occupation for foreign applicants. However, organizations are attempting to broaden their recruitment strategies, specifically targeting women and racialized women – a demographic currently severely underrepresented in the field.

A systemically biased industry

Despite representing the majority of IT workers in Canada, racialized immigrants are consistently marginalized in cybersecurity leadership positions. Data from recent research reveals that only 15% of the global cybersecurity workforce is non-white men, with racialized women practically absent from senior management – a mere 2%. The problem isn’t simply a matter of numbers; it’s about systemic barriers that actively stifle advancement.

Voices from the frontlines: the reality of working in cybersecurity

Our recent in-depth interviews with 55 foreign-born cybersecurity professionals – hailing from countries including India, Iran, Brazil, and Venezuela – painted a stark picture. These individuals, many with established Canadian permanent residency and significant experience, faced a constellation of challenges: restricted career progression due to a lack of mentorship and networking, language and cultural integration hurdles, and a disproportionate workload. The pressure to conform to traditionally masculine norms – celebrating aggressive competition – further compounded these difficulties. It’s a landscape riddled with daily obstacles and subtle, yet persistent, discrimination.

Beyond surface-level diversity initiatives

The findings underscore that superficial diversity programs are insufficient. Genuine inclusion requires a fundamental shift in organizational culture and policy. We need to move beyond simply hiring diverse talent and focus on creating an environment where that talent can thrive – where fairness, mentorship, and equitable opportunities are genuinely embedded. Leaders must demonstrate tangible commitment to inclusivity, fostering a culture of respect and challenging ingrained biases.

Fair leadership: the key to retention

Crucially, our research revealed a direct correlation between leadership fairness and employee treatment. Workplaces where leaders consistently exhibit fairness in their behaviour foster a more equitable and supportive environment – a vital factor in retaining diverse talent. Women in leadership roles, in particular, are instrumental in driving this change, advocating for underrepresented groups and dismantling exclusionary practices.

Numbers speak volumes

The data is clear: Canada's cybersecurity sector is struggling, not just with a skills shortage, but with systemic inequities. Addressing this requires a multifaceted approach – from bolstering immigration pathways to dismantling discriminatory practices, and, most importantly, cultivating a culture of genuine inclusion, starting at the very top. Failure to do so risks leaving Canada vulnerable and perpetuating a cycle of exclusion.