The Growing Importance of Cyber Resilience
During Cyber Smart Week earlier this month, the National Cyber Security Centre highlighted that over 4.3 million New Zealand account details have been exposed online, and NZ’s reported direct losses from cyber crime climbed from $6.8m to $7.8m in the first quarter of this year (you can read more here).
Given that backdrop, it feels like the right time to shine a spotlight on New Zealand’s cybersecurity talent landscape. Having spent time in the Telco industry before moving into recruitment, I’ve seen firsthand how critical strong, well-supported technology teams are to business success. As cyber threats grow in scale and complexity, the strength of your organisation’s security increasingly depends on having prepared, capable teams in place.
So, let’s explore where the cyber security skills gaps exist, what this means for employers, where the opportunities are for tech professionals, and what practical steps can help close the gap.
From Awareness to Action
Last year, we wrote about the importance of businesses ‘future-proofing’ their cybersecurity teams. Since then, the challenges have evolved, but so have the opportunities.
While the core issue remains the same – demand for cybersecurity talent in New Zealand continues to outstrip supply – the drivers have shifted. There are signs that burnout and attrition are shrinking the available talent pool and markets like Australia are actively recruiting Kiwi cyber talent.
So, what’s the good news? These challenges bring opportunities. Forward-thinking organisations can use this as a catalyst to rethink how they attract, develop, and retain their cyber talent, focusing on long-term capability, resilience, and sustainable growth.
Understanding the Impact Across Sectors
The impact of cyber threats extends far beyond the immediate financial cost of an attack. A single breach can cause operational disruption, halting critical services; reputational damage, eroding hard-earned customer trust; and regulatory consequences, including penalties for failing to safeguard sensitive data. Together, these risks underscore why cybersecurity resilience is a priority across nearly every sector.
The cybersecurity skills gap touches multiple industries, with some facing more pressure than others:
1. Financial Services: Banks and insurers are high-value targets for fraud and ransomware, and the stakes are heightened by compliance obligations and customer trust. These organisations require robust defences, with focus on roles that proactively identify threats and ongoing investment in incident response expertise.
2. Healthcare: Hospitals and public health providers rely on interconnected digital systems that can be vulnerable to ransomware attacks. Because they often operate on tight budgets, they may be using outdated software and hardware that lacks modern security features and systems that are difficult to patch or upgrade due to compatibility with medical devices or regulatory constraints. Budgetary constraints also mean it can be hard to compete for skilled talent.
3. Government and Public Sector: Central and local government agencies manage sensitive data, but recruiting skilled cyber staff into public roles can be challenging when competing against private sector offers.
4. Telco and Infrastructure: As someone who’s worked in Telco, I know how vital secure networks are in our interconnected world. A cyber-attack on core infrastructure can have a massive impact on business as well as everyday life.
Across all sectors, the focus needs to shift from reacting to incidents to building sustainable systems, processes, and people.
Opportunities for Tech Professionals
While the skills shortage presents challenges for employers, it also creates exciting opportunities for job seekers and professionals considering a move. Cybersecurity is one of the fastest-growing career paths in tech, and here at Absolute IT, we’re seeing demand increase for roles such as SOC Analysts, Penetration Testers, Cloud Security Architects, and Governance Specialists.
Cybersecurity offers excellent career mobility, the salaries and progression opportunities tend to be at the higher end of the scale, and you get the chance to make a tangible impact – protecting organisations, communities, and the digital infrastructure that keeps countries running.
Building a More Resilient Workforce
While conversations in 2024 were about preparing, conversations in 2025 are about taking action. Cybersecurity is now a top tech priority across New Zealand, and it’s not just an IT concern – it’s a shared responsibility that connects leadership, strategy, and culture. Organisations that invest in their people today will see long-term rewards in resilience and capability.
Here are some practical steps to consider:
1. Workforce Planning – Identify critical roles, define urgent requirements vs. those that can wait, and align hiring strategies to your long-term goals.
2. Retention – Talk to your cyber team to understand what recognition and rewards they value most, then design your retention strategy around those insights to reduce burnout and attrition.
3. Training and Development – Invest in graduate programmes and apprenticeships, and create clear learning and career development pathways for current employees.
4. Flexible Resourcing – Use trusted contractors and outsourced partners to meet immediate needs and cover any gaps while you focus on building internal capacity.
These steps can help balance short-term protection with long-term sustainability.
Looking Ahead
The cybersecurity landscape will continue to change, with predictions that there will be an increase in AI-driven attacks, including deepfake-enabled scams, automated malware, and large-scale phishing campaigns that outpace traditional defences.
Along with this will come a need for tighter regulation. The growing global emphasis on privacy, cyber standards and supply-chain security will shape New Zealand’s landscape too. Of course, with increased need, we’re expecting more competition for talent too.
Cybersecurity is ultimately about people – those defending, innovating, and responding every day. New Zealand organisations that act now by investing in people, partnerships, and proactive planning can turn today’s skills gap into tomorrow’s competitive advantage.
If you’re an employer looking to plan or strengthen your cybersecurity workforce, or a tech professional wanting to explore your next career move in this space, feel free to reach out – I’d be more than happy to help!
