A recent study conducted by Naoris Protocol has shed light on the growing pay gap between public and private sector cyber roles in the UK. This pay disparity poses a significant threat to the country’s national security by making it challenging for the government to attract and retain top talent in the cybersecurity field.
According to the study, salaries for key cyber security positions in the private sector are nearly double those offered in government roles. This disparity could lead to a drain of skilled professionals from the public sector, leaving critical cybersecurity roles unfilled and weakening the country’s defense against cyber attacks.
Chief executive David Carvalho emphasized the real risks posed by cybercrime to UK national security, highlighting the potential costs and damage to critical national infrastructure. Mid-level cyber security roles in London typically pay between £50,000 and £70,000 annually, while senior positions can range from £80,000 to over £120,000 in the private sector.
In contrast, government listings for cyber security roles offer significantly lower salaries, with a cyber security adviser position at the Ministry of Defence starting at just £36,530 per year. This disparity in pay could deter skilled professionals from considering public sector roles, further exacerbating the talent shortage in government cybersecurity departments.
Naoris Protocol warned that unless the public sector pay becomes more competitive, the UK government will struggle to combat emerging AI cyber threats effectively. The report also highlighted the challenges faced by organizations like the National Crime Agency (NCA) in filling cyber crime unit positions due to low pay and poor morale among staff.
Toby Lewis, global head of threat analysis at Darktrace, acknowledged the public sector’s strengths in investing in training and development for junior cyber security talent. However, he raised concerns about barriers in mid to late-career progression that could drive experienced professionals towards higher-paying private sector roles.
The National Audit Office (NAO) also expressed concerns about the government’s cyber resilience, citing significant gaps in independent assessments of 58 government IT systems. Gareth Davies, head of NAO, emphasized the severity of the cyber attack risk and criticized the government’s slow progress in addressing cybersecurity vulnerabilities.
Carvalho stressed the importance of closing the pay gap to safeguard the UK’s digital infrastructure and attract skilled professionals capable of combating evolving cyber threats. NAO’s findings revealed that one in three cyber security roles within the government were either vacant or filled by temporary staff, underscoring the urgency of addressing the talent shortage in public sector cybersecurity.
As cyber security concerns continue to rise across various sectors, the implementation of the Digital Operations Resilience Act (DORA) adds further pressure on organizations to enhance their cybersecurity measures. This news highlights the critical need for the UK government to prioritize competitive pay in the cybersecurity sector to ensure the country’s cyber resilience and national security in the face of evolving threats.