Decoding cyber security

Women make up 48 per cent of the national workforce, but just 17 per cent of cyber professionals. Eighty-nine per cent of respondents say cyber security is male-dominated. Women face real bias in recruitment, from affinity bias to career-break stigma to an overemphasis on technical skills. Once inside, they report lower belonging, less respect, and fewer chances to contribute than men. They are also far more likely to experience gender-based microaggressions, bullying and sexual harassment. Burnout is widespread: 72 per cent of all cyber professionals report it, and 85 per cent regularly work extra hours. Only 45 per cent of women see a clear path to progress, compared with 65 per cent of men. Of the women who left the industry, 40 per cent said their gender was a factor.

The report offers eleven recommendations for change. Immediate actions include zero tolerance for microaggressions, bullying and sexual harassment. Organisations should also tackle burnout, commit to inclusive marketing and recruitment, open up genuine progression opportunities, and expand flexible work. Taking a longer-term view, the report also calls for culture change from the top, engaging men as agents of change, transparent reporting on leadership and pay gaps, and stronger pipelines into the profession. 

The goal is a cyber security workforce large enough to meet Australia's security needs — and diverse enough to draw on the full range of skills the sector requires.