In boardrooms across North and South America, a recurring conversation is taking place. It's not about the latest threat actor or zero-day vulnerability, it's about people. More specifically, the critical shortage of cybersecurity professionals needed to defend our increasingly digital enterprises.
At PALMIQ, as an Acronis partner committed to empowering organizations with robust cyber resilience solutions, we're uniquely positioned to observe how this talent crisis impacts businesses of all sizes. The numbers are sobering: approximately 3.5 million cybersecurity positions remain unfilled globally in 2025, with over 750,000 of those vacancies in the United States alone. Meanwhile, North America has experienced a 2.7% reduction in its cybersecurity workforce, moving in precisely the wrong direction as threats intensify. This isn't just a hiring challenge, it's a fundamental mismatch between the velocity of digital transformation and our ability to secure it. Let's explore why this gap exists, how educational institutions are responding, and what organizations can do to bridge this divide while maintaining their security posture.
The cybersecurity talent shortage didn't appear overnight. It's the result of converging forces that have fundamentally reshaped the threat landscape and business operations simultaneously.
When surveyed, only 14% of banking and capital market leaders reported having the cybersecurity talent they need, with the public sector at 15%, energy and utilities at 20%, and insurance and asset management at 25%. These sectors represent critical infrastructure and economic pillars, the very organizations that can least afford security gaps.
The challenge extends beyond simply filling seats. The cybersecurity industry must work harder to capture potential employees' attention by illustrating value-based and multifaceted career paths. In a hyperconnected world where talented professionals have unprecedented career choices, cybersecurity must compete not just within the technology sector but across all industries. What makes this particularly concerning is timing. Gartner predicts that by 2025, the lack of cybersecurity professionals will be responsible for more than 50% of significant cybersecurity incidents. We're not talking about a future problem, we're living in that reality right now.
The good news? Educational institutions across the Americas are responding with remarkable innovation and scale. Universities have recognized cybersecurity as both a critical social need and an attractive program offering for students seeking career stability in an uncertain economy. Leading institutions have developed comprehensive cybersecurity programs that blend theoretical foundations with hands-on experience. Carnegie Mellon University's CyLab, MIT's Computer Science and Artificial Intelligence Laboratory, and Stanford's Cyber Policy Center represent the gold standard, producing graduates who understand both the technical complexities and policy implications of modern cybersecurity.
But it's not just elite institutions making a difference. Over 400 schools have been designated as National Centers of Academic Excellence in Cybersecurity, gaining access to specialized curricula, faculty development opportunities, and networking events. This distributed approach ensures that cybersecurity education isn't concentrated in a handful of coastal universities but available to students across the Americas.
Online education has democratized access further. Programs from the University of Maryland Global Campus, Arizona State University, and others allow working professionals to upskill without abandoning their current roles. This flexibility is essential, we can't afford to wait four years for traditional degree pathways when threats are evolving daily.
Specialized programs have emerged to address specific dimensions of the cybersecurity challenge. MBA programs in cybersecurity blend technical knowledge with business acumen, preparing leaders who can translate security requirements into executive language. Digital forensics programs train investigators who can respond to incidents and support legal proceedings. Cloud security specializations prepare professionals for the reality that most organizations now operate in hybrid environments.
Despite these educational advances, the workforce gap continues to widen. Why aren't we closing this divide?
First, there's a fundamental pipeline problem. Only 69% of organizations have entry-level cybersecurity professionals, dropping to just 64% for smaller companies with 500 or fewer employees. The industry has created a paradox: everyone wants experienced professionals, but few want to invest in developing them. Nearly half of all companies take longer than six months to fill a cybersecurity vacancy, with 36% of organizations requiring a year or more to hire senior-level professionals.
Second, there's a significant perception barrier. Many Americans don't realize that a cyber career is available to them, with a widespread perception that you need a computer science degree and deeply technical background to get a job in cybersecurity. This misconception excludes talented individuals who could excel in governance, risk, compliance, security awareness, or policy roles that require different skill sets.
Third, economic pressures are constraining growth at precisely the wrong moment. Nearly a quarter of respondents in North America and Europe reported their organizations had experienced layoffs in cybersecurity teams in the last 12 months, with 39% citing lack of budget as the top reason for cyber shortages. Organizations are cutting cybersecurity staff even as threats intensify, a dangerous contradiction driven by short-term financial thinking. Finally, there's a skills evolution challenge. Job postings requiring AI knowledge have increased from 6.3% to 7.3%, reflecting how artificial intelligence is reshaping both attack and defense. Educational institutions must constantly update curricula to reflect emerging technologies, creating a perpetual game of catch-up.
At PALMIQ, working alongside Acronis to deliver comprehensive cyber protection solutions, we see this talent challenge through a practical lens. Organizations can't simply wait for the talent shortage to resolve itself. The threats won't pause while we train the next generation of defenders. This is where strategic partnerships become essential. By working with managed service providers who specialize in cybersecurity, organizations can access expertise that would be prohibitively expensive to build in-house. Advanced analytics and functionality can monitor for, detect, and actively respond to malicious behavior automatically, freeing up existing staff's time and alleviating impacts of the cybersecurity talent shortage.
Modern platforms like Acronis Cyber Protect Cloud don't just provide tools, they embed expertise into the solution itself. Automated threat detection, integrated backup and security, and AI-powered protection mean that organizations don't need to hire a team of specialists to achieve enterprise-grade security. Instead, they can focus their limited internal talent on strategy, governance, and high-value activities that truly require human judgment.
This approach also addresses burnout, one of the hidden drivers of the talent shortage. Automation of routine tasks, especially those that are repetitive, boring, or high-stress, helps reduce labor needs and gives employees interesting, lower-stress work. When cybersecurity professionals spend less time on manual log analysis and more time on strategic initiatives, job satisfaction improves and retention increases.

Solving the cybersecurity talent challenge requires coordinated action across multiple fronts:
For educational institutions: Continue expanding program offerings, but focus equally on creating pathways for non-traditional candidates. Cybersecurity needs historians who understand information warfare, psychologists who understand social engineering, lawyers who understand digital evidence, and communicators who can translate technical risks for executives.
For employers: Invest in entry-level talent and create structured development programs. 85% of employers would rather upskill existing staff, and 69% of hiring managers favor candidates who've recently upskilled or gained certifications. This preference should translate into concrete investment in training programs and clear career progression paths.
For government: Continue supporting initiatives like the National Centers of Academic Excellence and skills-based hiring programs that remove degree requirements where appropriate. Earlier in 2025, the administration announced a $244 million investment in apprenticeships for growing industries, including cybersecurity, demonstrating the kind of large-scale commitment needed.
For technology partners: Design solutions that embed expertise and reduce the specialized knowledge required for effective security. Every advance in automation and AI-powered protection effectively multiplies the impact of scarce human talent.
The cybersecurity talent shortage in the Americas represents both a crisis and an opportunity. Yes, we face a significant gap between the defenders we need and those currently available. But this challenge is driving innovation in education, technology, and service delivery that may ultimately make our digital ecosystem more resilient.
At PALMIQ, we believe the solution lies not in choosing between people and technology, but in optimizing how they work together. By partnering with Acronis to deliver integrated cyber protection that automates routine tasks, provides intelligent assistance, and embeds expertise into the platform, we help organizations achieve security objectives even with limited internal resources. The future of cybersecurity won't be built by armies of specialists working in isolation. It will be built by diverse teams supported by intelligent technology, educated through accessible programs, and guided by strategic partners who understand that true cyber resilience is a shared responsibility.
The talent gap is real, significant, and urgent. But with collaboration between educational institutions, technology providers, governments, and organizations, we can build a workforce capable of defending our digital future. The question isn't whether we can close this gap—it's whether we'll commit to doing so before the cost of inaction becomes too high.
