Women's cyber underrepresentation deepens as AI grows

Industry experts say women remain significantly underrepresented in cybersecurity as artificial intelligence reshapes how organisations defend against threats.

They argue that gender diversity in cyber teams is now a strategic issue as AI changes both attack methods and defensive practices.

Artificial intelligence underpins many security operations, from detection and response to automation. AI tools process large volumes of data and identify patterns faster than human analysts. Attackers are adopting the same technologies, increasing the scale and speed of incidents.

Against this backdrop, senior practitioners warn the sector's long-standing gender imbalance could become more entrenched unless organisations change how they recruit, develop and retain women in cyber roles.

Vanessa Kyte, Director, Cybersecurity-ANZ at OpenText, said the industry often focuses on hiring more staff instead of making better use of existing talent.

She pointed to recent research showing a disconnect between women's AI skills and their representation in cyber roles. An ISC2 study found a higher proportion of women than men reported significant knowledge of AI and machine learning. Yet women still make up only a small share of Australia's cybersecurity workforce.

ISACA's latest survey of privacy professionals found a persistent skills gap, with almost half of organisations training non-privacy staff to meet demand. Industry sources say the trend shows hiring alone will not solve the shortage of specialised expertise.

Many women continue to enter cybersecurity from careers in risk, compliance, law, psychology and business. Practitioners say these backgrounds align with emerging needs in AI governance, machine identities and organisational resilience, as cyber work shifts beyond a narrow focus on networks and infrastructure.

"Artificial intelligence is transforming cybersecurity, but solving the industry's biggest skills challenge isn't simply about recruiting more people. It's about ensuring organisations aren't overlooking talent already equipped to help secure the next generation of AI-enabled systems. An ISC2 study found 27 per cent of women reported having significant knowledge of AI and machine learning, compared with 17 per cent of men. Yet despite this capability, women make up only 17 per cent of Australia's cybersecurity workforce.

"At the same time, ISACA's latest research found 53 per cent of privacy professionals believe a skills gap exists, with almost half of organisations training non-privacy staff to meet demand. As organisations adopt AI for threat detection, response and automation, broadening the cybersecurity talent pipeline has never been more important.

"Women continue to enter cybersecurity through non-traditional pathways, bringing experience from risk, compliance, law, psychology and business. As cybersecurity expands beyond protecting networks to include AI governance, machine identities and organisational resilience, these diverse perspectives are becoming increasingly valuable.

"Organisations have a meaningful opportunity to strengthen their cyber capability by investing in flexible career pathways, on-the-job learning, mentoring and leadership opportunities for women. Visibility also matters. When women are keynote speakers, panellists and technical experts, it sends a powerful message that cybersecurity is a career where women can thrive and lead.

"International Women in Cyber Day is about recognising women already working in the profession and acknowledging that diversity has become a strategic advantage. Organisations that attract, develop and retain women in cybersecurity roles will be better prepared to navigate the complex risks created by AI while building stronger, more resilient security teams for the future," Kyte said.

Diverse teams

Academic leaders say diversity in cyber teams is not only an equity issue but a practical requirement in an adversarial field. They argue that homogeneous groups are more likely to share blind spots.

"Cybersecurity is one of the fields in which women remain most underrepresented, and it is also one of the fields in which their perspectives are most needed. Cybersecurity is an adversarial discipline, and teams made up of people with different experiences and perspectives are less likely to share the same blind spots," said Professor Craig Costello of Queensland University of Technology.

Costello said many organisations still focus primarily on recruitment targets. He warned that hiring more women into entry and mid-level roles will not fix the imbalance at senior levels without sustained cultural change.

"Attracting more women into cyber is only half the challenge. Organisations must also create environments in which women are supported, heard and given genuine opportunities to progress into senior technical and leadership roles," he said.

He also called for a broader description of cyber careers to reflect the mix of technical and non-technical attributes modern security roles demand.

"We should broaden the way we describe cyber careers. Technical expertise is important, but so are curiosity, communication, judgement and calm decision-making under pressure. Recognising that wider range of strengths opens the profession to talented people who may never have pictured themselves working in cyber," Costello said.

AI and progression

Practitioners working at the intersection of AI and security say the technology is intensifying scrutiny of workforce skills and progression pathways. They report that women often enter AI-related security work but face barriers as they seek senior technical or leadership roles.

"AI is changing cybersecurity quickly. Security teams are using it to analyse information and respond to threats, while attackers are finding new ways to use the same technology. This is creating a need for people who can understand AI, question its output and recognise where new risks may be developing.

"Meeting that need will depend on how effectively organisations develop and retain talent across the cybersecurity profession. Women remain underrepresented, particularly in senior technical and leadership roles. Recruiting women into cybersecurity is only the first step. What sustains them is access to opportunities to build real experience and clear pathways for career progression.

"As AI reshapes cybersecurity, teams need people who can challenge assumptions and contribute to important decisions. International Women in Cyber Day is an opportunity to look beyond representation and ask whether women have the opportunities and influence to help shape the future of the profession," said Dr Seda Selcuk, AI/ML Developer at Middlebank Consulting Group.