Very Few Women Are CISOs

 There is a huge gender crisis in for jobs in the growing cyber security industry, with men holding 87 per cent of the chief information security officer (CISO) roles at Fortune 500 companies, a new report has revealed. 

According to the global market research firm Forrester, the CISO role is dominated by men and Fortune 20 companies fare a bit worse, with only two female CISOs.

"Calling a discrepancy this large a gender gap is a clear understatement. This is an emergency signal warning us that the cybersecurity industry has major issues welcoming, developing, and promoting female cybersecurity talent," said Jeff Pollard. Principal Analyst. 

"It's difficult to sympathise with those claiming talent shortage challenges when roughly half of the population is so underrepresented," he added. 

Among Fortune 500 companies, 45 per cent CISOs have MBAs, demonstrating the growing need for CISOs to understand, speak and think in business terms despite technology backgrounds. Only 11 per cent of Fortune 500 CISOs list a military background, with only 4 per cent previously employed by law enforcement, the report noted. 

"Fortune 500 CISOs have longer tenure than expected at four years, which is plenty of time to strategise, develop plans, execute, and look ahead to the next step in their career path," it added. 

Securing the role of CISO proves to be difficult for longstanding employees. Nearly 59 per cent of CISOs were external hires with that number jumping to 64 per cent in Fortune 100 companies. 

While Fortune 100 companies are reluctant to hire rookie CISOs, Fortune 500 companies are much more interested in individuals who are new to the role, with rookies making up 2/3 of Fortune 500 CISOs. 

Economic Times:

You Might Also Read:

Room At The Top For Women In Tech:

Difficult: Attracting Women To Cybersecurity:


 

 

« US Defense Contractors Stole Images From UK Secret Surveillance Station
Popular Streaming Sites Secretly Mine Cryptocurrency »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

CybelAngel

CybelAngel

CybelAngel is a leading digital risk protection platform that detects and resolves external threats before these wreak havoc.

ACI Worldwide

ACI Worldwide

ACI Worldwide powers electronic payments for more than 5,000 organizations around the world.

Advanced Systems International SAC

Advanced Systems International SAC

Advanced Systems international is a global company dedicated to data security software design, development, support, and licensing.

VMRay

VMRay

VMRay delivers advanced threat analysis and detection that combines a unique agentless hypervisor-based network sandbox with a real-time reputation engine.

KOBIL

KOBIL

KOBIL is a pioneer in the fields of smart card, one-time password, authentication and cryptography.

Cynterra

Cynterra

Cynterra is a next generation cloud cyber security and data analytical service provider offering cloud security compliance, data protection, visibility and threat protection services.

Paladin Capital Group

Paladin Capital Group

Paladin is a leading global investor that supports and grows the world’s most innovative cyber companies.

Bloc Ventures

Bloc Ventures

Bloc Ventures is an investment company providing long-term, ‘patient’ equity capital to early stage unquoted deep technology companies.

Flatt Security

Flatt Security

Flatt Security is a cyber security startup based in Japan providing security assessments and other cyber security services.

CybersCool Defcon

CybersCool Defcon

CybersCool is committed to educate and train, re-skill and up-skill the current workforce of various industries and businesses in the knowledge and know-how of cybersecurity.

The IoT Academy

The IoT Academy

The IoT Academy is a reputed Ed-Tech Institute that provides training in emerging technologies such as embedded systems, the Internet of Things (IoT), Data Science and many more.

Cyberplc

Cyberplc

Cyberplc is a global cybersecurity consulting firm providing services to government, the public sector and enterprises.

Dimension Data

Dimension Data

Dimension Data is a leading African born technology provider operating in the Middle East and Africa, offering a portfolio of services including intelligent security solutions.

Locuz

Locuz

At Locuz, we’ve made it our mission to help businesses like yours create an actionable digital strategy.

Nuance Communications

Nuance Communications

From revolutionizing the doctor-patient relationship to reinventing the way brands connect with their customers, Nuance technology helps organizations push the boundaries of what’s possible.

CyberSecAsia

CyberSecAsia

CyberSecAsia series conference is the one and only decision-makers gathering for CISO and info security experts in Asia.