As cyberattacks multiply, the industry is facing a silent crisis: there aren’t enough cybersecurity professionals to defend against them. The global shortage stands at 3.4 million professionals, according to the (ISC)² Cybersecurity Workforce Study 2024, and in Latin America, the situation is critical.
The figures in Latin America
- 1.3 million unfilled cybersecurity positions in the region (ISC2 2024)
- 71% Organizations in Latin America report that staff shortages are affecting their ability to respond (ISACA State of Cybersecurity 2024)
- 25–30% Annual turnover in cybersecurity positions — professionals change jobs in search of better conditions
- 6–9 months Average time to fill a SOC analyst or security engineer position
Real Impact on Businesses
The talent shortage is not just a human resources issue—it is a direct security risk:
- Longer detection times: Fewer people monitoring alerts means more threats go unnoticed
- Burnout among the existing team: Overworked professionals make mistakes and eventually quit
- Delayed security projects: Zero Trust implementations, secure cloud migrations, and certifications are postponed indefinitely
- Unsupervised tool dependency: Buying technology without staff to operate it is like having an alarm that no one monitors
Why Is It So Hard to Hire?
- Global competition: Companies in the U.S. and Europe hire Latin American talent remotely, paying them in dollars
- Certification barrier: The most highly regarded certifications (CISSP, GIAC, OSCP) cost $5,000–$10,000 and require prior experience
- Universities are not producing enough graduates: Cybersecurity programs in Latin America are limited and do not cover practical skills
- Rising salary expectations: Cybersecurity salaries are growing by 15–20% annually in the region
Alternatives for Companies That Cannot Hire
- AI-powered MDR: Instead of putting together a team of 8–12 analysts, hire an outsourced SOC that already has the talent and technology.
- CISO as a Service: Gain access to senior strategic leadership without having to compete for a scarce and expensive candidate.
- AI-Driven Automation: Use AI to automate repetitive Level 1 tasks (triage, classification, basic response) and reserve human talent for complex investigations.
- In-house training: Identify IT professionals with potential and fund their security training. It's faster than searching the job market.
BorneoCR Addresses the Talent Shortage for your company. Our AI-powered MDR includes a team of L1/L2/L3 analysts, AI that automatically handles over 80% of alerts, and a CISO-as-a-Service that provides strategic leadership. All without you having to hire a single specialist. Let’s talk.