Comply with ZDNET: Add us as a most well-liked supply on Google.
ZDNET’s key takeaways
- There is a massive mismatch between demand and rewards in cyber.
- Working stress is simply more likely to enhance as a consequence of using AI.
- Safety workers ought to give attention to technique and communication abilities.
Virtually 20% of organizations have reported a significant safety assault prior to now two years, and the menace setting, whether or not as a consequence of prison exercise or the rise of recent AI-enabled fashions, akin to Anthropic’s Mythos, continues to evolve at breakneck pace. Nonetheless, the cybersecurity professionals who assist their enterprises handle these challenges do not feel adequately rewarded — and most are fed up with the state of affairs.
That is the conclusion from the newly launched Harvey Nash International Tech Expertise & Wage Report, which surveyed over 3,646 know-how professionals globally. Whereas 19% of respondents reported a significant assault at their agency prior to now 24 months, these working within the safety specialism have been the least more likely to report a pay enhance during the last 12 months.
Additionally: These 4 vital AI vulnerabilities are being exploited sooner than defenders can reply
Solely 29% of cyber professionals stated they’d acquired extra compensation for his or her efforts, which is in stark distinction to different roles, the place no less than half of tech professionals acquired a pay enhance in 2025, particularly in DevOps (56%), product administration (51%), and enterprise evaluation (50%).
“The analysis clearly tells us that there is a massive mismatch between the demand and the reward in cyber,” stated Ankur Anand, group CIO at know-how and expertise options supplier Nash Squared, which owns tech recruiter Harvey Nash, the agency that produced the survey.
“I feel this mismatch is because of the complacency of many boards saying nothing unhealthy has occurred in the previous couple of years, so safety have to be effective. And that is the irony — that when safety groups are doing a lot, they usually’re stopping harm to the group, they’re getting the least recognition.”
Motivation is waning
Unsurprisingly, the survey discovered that safety specialists have had sufficient. Folks working in cybersecurity are the third-most sad IT professionals globally (23%), simply behind these working in high quality assurance/testing (24%) and infrastructure/assist (25%).
What’s extra, the dearth of recognition and a common sense of despondency imply virtually half (49%) of cybersecurity professionals need to transfer jobs within the subsequent 12 months, nicely above the worldwide common (39%) throughout know-how roles.
“Cyber is without doubt one of the few roles the place success is invisible, and failure may be very seen,” stated Anand, referring to the age-old enterprise problem of too many executives assuming safety is ok as a result of their group hasn’t been attacked.
Additionally: 10 methods AI can inflict unprecedented harm in 2026
Nonetheless, this complacency may shortly grow to be a significant subject. Whereas 80% of organizations haven’t suffered a significant assault prior to now two years, a failure from senior executives to acknowledge the size of the cyber problem and to take care of their safety groups may imply the enterprise is subsequent within the firing line.
In these circumstances, the place cybersecurity considerations proceed to rise, and firms proceed to stall at rewarding and retaining their proficient workers, many professionals can really feel their motivation for work begin to wane.
“It is the mixture of the dearth of recognition, the stress by way of making certain that the harm just isn’t carried out, and that provides to the workload due to the legacy tech stack and the distributed workforce construction that’s doing the harm to folks’s motivation,” stated Anand.
AI brings new threats
Crucially, the working stress is simply more likely to go a technique: upwards. The rise of AI brings new fashions, methods, and dangers. Anand stated organizations and safety professionals should think about the pace at which AI is evolving and its doubtless affect on enterprise operations.
“Once I assessment the menace vectors with my head of safety, it boggles my thoughts in regards to the variety of vulnerabilities that outsiders are attempting to compromise within the enterprise IT setting, and that actuality makes it very hectic to work within the safety group,” he stated.
Such is the tempo of change that Anand stated the menace setting is shifting sooner than most organizations can structurally adapt. He commonly speaks with digital leaders at different corporations who say they’ve invested closely in safety however nonetheless wrestle to deal with the threats.
Additionally: AI is quietly poisoning itself and pushing fashions towards collapse – however there is a treatment
Some trade consultants are involved that present fears in regards to the tempo of AI-enabled change are simply the start line. Anand acknowledges that the hype surrounding Anthropic’s Mythos mannequin is justified, with the potential for this mannequin and different AI-powered improvements to disrupt the entire trade.
“These developments present how AI can uncover all these sleeping vulnerabilities in techniques,” he stated.
“Anthropic, as a accountable group, is making an attempt to make sure that the important thing platforms are addressing these vulnerabilities. Nonetheless, you additionally should take into consideration whether or not different non-responsible menace actors will create comparable instruments.”
Taking a proactive strategy
Briefly, the trade is correct to be involved about Mythos, and the ramifications may imply extra stress for cyber professionals. Nonetheless, it isn’t all unhealthy information, and the analysis means that AI may assist to cut back the pressure on safety workers.
Cybersecurity professionals (48%) are the third-most doubtless IT staff to not really feel threatened by AI taking their jobs, behind firmware/{hardware} engineers (55%) and know-how leaders (58%). Anand stated safety specialists perceive that AI creates new dangers but in addition generates new alternatives.
“AI just isn’t eradicating the necessity for safety; it’s growing it, and that is the place a cyber skilled provides worth — they are going to outline what beauty like,” he stated. “It is advisable suppose, ‘Okay, how do I contribute to the AI technique of our group and guarantee what we do is throughout the guardrails of the rules and knowledge safety legal guidelines?'”
Additionally: 5 safety ways your corporation cannot get fallacious within the age of AI – and why they’re vital
With the analysis suggesting that just about half (49%) of cybersecurity professionals need to transfer jobs within the subsequent 12 months, safety specialists are more likely to discover themselves preventing for alternatives in a aggressive labor market. Anand inspired cyber specialists to hone their AI capabilities and to develop abilities in different areas, together with technique and communication.
“The strongest cyber professionals at present mix the technical depth of the area with the enterprise context,” he stated. “They’ll clarify a safety subject with out the jargon, with none drama, however by being very sensible in regards to the enterprise affect and the way the agency manages it.”
Reasonably than burdening the management with technical particulars, essentially the most in-demand cyber workers are conscious of how specialist instruments, akin to AI, can be utilized to cut back dangers, not enhance them. These cyber professionals clarify how good safety follow is essential to the general enterprise technique.
“This focus just isn’t about audits, findings, and so forth,” stated Anand. “It is a few progressive thought course of — it is speaking about cyber strategically by way of enterprise wants, enterprise dangers, and enterprise readiness for the longer term.”
