South Africa is confronting an escalating cybersecurity talent shortage, with organisations struggling to fill critical roles. A 2024 [CSIR](https://www.csir.co.za/sites/default/files/Documents/241013_CSIR%20Infographic%20posters_Draft%204_Cybersecurity%20skills%20gap.pdf) national survey revealed that 63% of cybersecurity positions were either partially or completely unfilled. The same study indicated that over a third of applicants possessed less than 25% of the qualifications demanded, and merely 4% met 75% to 100% of the required criteria.
The deficit of qualified cybersecurity specialists is not solely a numbers issue; it also reflects a gap in the blend of technical expertise and practical capability that modern workplaces expect.
**Why is this increasingly critical?**
AI is reshaping the threat landscape, generating more convincing phishing messages and sophisticated intrusion techniques. Professionals in [cybersecurity](https://en.wikipedia.org/wiki/Cybersecurity) must therefore stay ahead of AI‑enabled attack methods while also leveraging AI‑driven tools to detect and mitigate breaches.
**Beyond technical know‑how**
Employers argue that mastery of security tools alone is insufficient. They seek individuals who demonstrate analytical thinking, curiosity, problem‑solving abilities, and an understanding of how technology interacts with systems, people, and business priorities.
In day‑to‑day operations, a cybersecurity practitioner must differentiate genuine threats from false alarms, pinpoint the most exposed assets, and decide when to escalate incidents. These judgments rely on technical knowledge, sound judgement, and hands‑on experience—skills that cannot be acquired without practical exposure.
**What do employers expect?**
Research from the 2025 [South African Graduate Employers Association](https://sagea.org.za/the-sagea-employer-benchmark-and-candidate- insights-2025) shows that, alongside a demand for technically literate graduates, employers value resilience, strong communication, and a willingness to keep learning.
For cybersecurity roles specifically, continuous learning is essential because protected technologies evolve, attack methods change, and defensive skills must adapt. While formal qualifications lay a foundation, they cannot be the endpoint of professional development.
**How can education bridge the gap?**
Closer collaboration between tertiary institutions and industry is vital. Work‑integrated learning, internships, supervised projects, and mentorships can expose students to real‑world cybersecurity operations before they enter full‑time roles.
The partnership should be reciprocal: industry communicates the technologies, capabilities, and workplace behaviours it needs, while academic institutions use this insight to continuously refine curricula and learning activities. Practical exposure does not have to involve live organisational environments; virtual labs, controlled testing settings, and simulated cyber incidents enable students to practice safely.
Industry‑aligned micro‑credentials add another layer of specialisation alongside formal degrees, helping both students and working professionals keep pace with evolving technologies.
**What is the ultimate goal?**
The aim is a continuous relationship between education and employment rather than a one‑off handover at graduation. Employers require a steady pipeline of emerging talent; institutions need up‑to‑date industry insights; and students need realistic opportunities to test and develop their knowledge.
AI raises the stakes but also clarifies the direction of the solution. South Africa needs cybersecurity professionals who can understand technology, interrogate problems, make sound decisions under pressure, and keep learning as threats evolve.
Strengthening the link between tertiary education and industry will be crucial for building these capabilities. Preparing the next generation of cyber defenders means providing not only theoretical knowledge but also practical experience and adaptability to meet future challenges.