Women urged to close cyber skills gap as AI reshapes work

Cybersecurity leaders are urging organisations to rethink how they recruit and develop talent as International Women in Cyber Day highlights the sector's gender imbalance. Senior figures from Proofpoint, Zscaler and HackerOne say human skills and diverse perspectives remain critical as artificial intelligence reshapes security work.

Women make up a small minority of the cybersecurity workforce in Australia and globally. Executives warn this leaves security teams without a broad range of viewpoints at a time when attacks are becoming more complex and AI-driven tools are changing how threats are detected and managed.

Jennifer Cheng, Director, Cybersecurity Strategy, APJ, at Proofpoint, said the rapid adoption of AI in security operations does not reduce the need for human judgment and empathy. Organisations that overlook women, she said, risk deepening both the skills shortage and gaps in decision-making.

"This International Women in Cyber Day, let's consider what more we can do to build a resilient industry and thriving workforce. As AI reshapes cybersecurity and the future of work, we have an opportunity to rethink not just the technology we use, but the talent and perspectives we bring to the table. Cybersecurity, in practice and in principle, must remain human-centric and collaborative. AI can help us detect threats and make decisions faster, but at its core, cybersecurity is ultimately about protecting people. Human judgment, empathy and diverse perspectives must remain central to how we make decisions. This is where women have an important role to play. Different experiences and mindsets help us challenge assumptions, see problems differently and make better decisions. Diversity makes us stronger at solving complex cybersecurity challenges. To women in cyber: don't be afraid to take your seat at the table. Put your hand up for the bigger role. Don't let imposter syndrome tell you that you're not ready. And when you get there, bring someone else with you. Share what you've learned. Sometimes, creating change starts with something as simple as opening a door for someone else. Cybersecurity has always faced a talent shortage. We cannot afford to leave capable women on the sidelines."

Cheng's comments reflect a wider concern that the industry still frames cybersecurity largely as a technical field. Leaders argue this narrows the talent pool and discourages people from non-traditional backgrounds who may bring skills in communication, collaboration and problem-solving.

At Zscaler, Senior Director, ANZ Channels & Alliances Sonja Johnson links those perceptions directly to Australia's gender gap in cyber roles. She points to research showing women represent only 17% of the local cybersecurity workforce.

"This International Women in Cyber Day, we need to challenge the assumption that a successful career in cybersecurity requires a deeply technical background. With women representing only 17% of Australia's cybersecurity workforce, broadening how we identify talent is critical."

Johnson said many security roles require skills in managing relationships, working with business stakeholders and aligning protection measures with organisational outcomes. This is particularly clear in the channel, where partners support the deployment and adoption of security products across areas such as AI security, data security and Zero Trust.

"Cybersecurity also needs people who can build trust, solve problems and connect technology with customer outcomes. I wasn't drawn to the industry by technology. I stayed because of the people and the opportunity to help organisations protect what matters most. After more than 30 years, that human element remains just as important, particularly as AI accelerates the pace of change. Across the channel, partners deliver more than licences, supporting deployment, adoption and services in areas including AI security, data security and Zero Trust. By recognising transferable skills and making the breadth of career pathways more visible, vendors and partners can help more women build rewarding careers in cyber."

Executives also highlight the role of professional networks and communities in attracting and retaining women in security. Industry groups, conferences and local meetups can give newcomers access to mentors and exposure to different types of roles before they commit to a specific career path.

Crystal Hazen, Senior Security Technical Program Manager at HackerOne, said community support shaped her move into cyber after a career in the music industry. She now leads the company's internal bug bounty and penetration testing programmes and works on early-stage product testing.

"I came to HackerOne from the music industry, and the security community welcomed me during a major career change. Since then, my path has taken me from helping build our live hacking events and supporting open-source programs to customer success and, today, HackerOne's security team. I now lead our internal bug bounty and penetration testing programs, as well as our 'Customer Zero' initiative, which helps incubate and strengthen new products and services before they reach customers. That journey has shown me how much of cybersecurity is built around community. Throughout my career, I've worked alongside ethical hackers and security teams, while also volunteering with BSidesSF. Again and again, I've seen how much people can learn when they have a place to ask questions, test their skills and learn directly from others doing the work. I feel fortunate to contribute to a safer internet while giving back to the community that gave me a place to learn, grow and contribute, and I hope to help others find that same sense of belonging. International Women in Cyber Day is an important reminder that we need to create more pathways for women. That means not only opening doors to security roles, but also building communities where women can develop skills and relationships before they ever apply. Conferences and local security groups can be invaluable places to make that first connection and begin exploring what's possible. You don't have to know exactly what your cybersecurity career will look like before you begin. Get involved in the community, follow the problems that interest you and keep learning from the people around you. There are many ways to contribute to security, and the industry is stronger when more women have the opportunity to find theirs."