The Cybersecurity Talent Landscape in Hong Kong

The cybersecurity talent and workforce situation has been the subject of much discussion and research, especially following the Covid-19 pandemic. There is a general consensus, supported by solid research and facts, that the workforce market is facing several challenges, notably a significant imbalance between demand and supply.

Hong Kong is not immune to this situation, and there is a widespread struggle to find the right resources, particularly when they are most needed. Cybersecurity incidents and attacks are on the rise, driven by increasingly sophisticated cybercriminals, with advancements in AI enhancing both the speed and complexity of these attacks.

In recognition of this significant challenge, Sia has collaborated with the Hong Kong China Network Security Association (HKCNSA) to deepen the understanding of the current cybersecurity workforce in Hong Kong. The key objective is to identify key root causes and trends, leading to recommendations and actionable ideas for stakeholders, including cybersecurity professionals, universities, government bodies, and others.

While many reports and studies on this topic exist globally, this is the first attempt to provide clarity on such a complex issue within the Hong Kong community. The local context presents similarities with other markets but also has its unique characteristics.

In the study, various sources of information and opinions from different parties were collected. A survey was conducted with over a hundred cybersecurity professionals in Hong Kong, along with interviews with leading professional recruiters. Additionally, a few universities in Hong Kong were approached to assess the state of their cybersecurity programs and courses. Furthermore, government organizations that pursue programs to attract talent in Hong Kong were contacted to understand the effectiveness and challenges of these initiatives.

Unique challenges that are specific to Hong Kong regarding Cybersecurity talent

Understanding the root causes of these gaps is not straightforward. Experts believe that the reasons are systemic, and the unique context of Hong Kong has not facilitated resolution. The resulting talent shortage has driven up hiring costs, prompting companies to seek more automation and outsourced services, particularly from locations outside Hong Kong where services can be provided remotely and labor is cheaper. Additionally, attracting talent to relocate to Hong Kong has proven difficult due to a combination of visa sponsorship issues, relocation complications, and salary expectations.

Cybersecuity professionals believe that professional certifications, training initiatives and partnerships with academia would be effective. Others are convinced that talent development initiatives and government support programs would yield better results.

The demand for cybersecurity professionals in Hong Kong is expected to grow steadily over the next 3 to 5 years. Some recruiters note that persistent cyber threats will maintain steady demand, particularly among local and Chinese companies, even as some multinationals relocate roles elsewhere. Additionally, this growth will be supported by ongoing digital expansion and increased awareness of data protection.

In general, there will be a rising demand for skills in cloud security, AI security, and incident response as Hong Kong strengthens its position as a regional financial and tech hub, while generalist roles may decline due to automation. Regulatory changes will also drive hiring in risk and compliance roles.