Esther Eze: Bridging Cybersecurity Diversity Gap Through Mentorship, Innovation

Esther Eze is redefining what it means to lead in cybersecurity. As a trailblazing IT Security Analyst and WiCyS Ambassador, she is intentionally transforming the industry from within. Her journey—from her roots in Nigeria to academic and professional achievements across Ghana, the UK, and now the United States —reflects resilience and a relentless drive to […]

Esther Eze is redefining what it means to lead in cybersecurity. As a trailblazing IT Security Analyst and WiCyS Ambassador, she is intentionally transforming the industry from within. Her journey—from her roots in Nigeria to academic and professional achievements across Ghana, the UK, and now the United States —reflects resilience and a relentless drive to bridge the diversity gap in tech.

Eze’s impact goes beyond technical expertise: she is a passionate mentor, empowering women and underrepresented groups to find their place in cybersecurity, and actively shaping the future workforce through hands-on training, advocacy, and community-building. In an industry facing a critical talent shortage, Eze stands out as an innovator championing upskilling, inclusion, and the belief that diverse voices are essential to keeping our digital world safe.

“The cybersecurity industry is at a crossroads. While the digital transformation of global economies accelerates, the shortage of skilled cybersecurity professionals is becoming a critical concern. From Nigeria to the United States, the industry is grappling with a widening talent gap that, if unaddressed, could cripple national security infrastructures, stall innovation, and leave organizations vulnerable to increasingly sophisticated cyber threats.
Having also worked as a Cybersecurity/SOC Analyst in the UK, and currently working in the United States, I have encountered these talent shortages firsthand. The gaps are not only real, they are endemic,” she expressed.

A Crisis of Supply and Demand

The (ISC)² 2024 Cybersecurity Workforce Study reports a global shortfall of over 3.4 million cybersecurity professionals. In Africa, the disparity is even more pronounced, with some countries averaging fewer than 1,000 certified cybersecurity experts per 10 million citizens. In Nigeria, for example, a country of over 200 million, we are dangerously under-resourced in key cybersecurity roles such as penetration testing, threat intelligence, cloud security, and GRC (Governance, Risk, and Compliance).

“There is a dangerous misconception that cybersecurity is only about hacking or technical expertise,” I often tell my students and mentees. “But today’s cyber workforce needs strategic thinkers, legal experts, communicators, and behavioral analysts.”

The demand for cybersecurity professionals has evolved, but our pipeline of talent has not. Many university programs still offer outdated curricula that lack hands-on experience with cloud-native tools, AI-driven security, or zero-trust frameworks. This creates a workforce that is certified but unprepared.

Brain Drain and Retention Struggles

While mentoring young professionals starting in cybersecurity in Nigeria, I have witnessed a troubling pattern. Once trained and certified, many cybersecurity experts migrate to Europe or North America in search of better pay, professional recognition, and a supportive infrastructure. The recurring answer you will always hear is “We can’t afford to grow here.”

This brain drain leaves local organizations, especially in Nigeria vulnerable and stalls national cybersecurity development. Meanwhile, in the U.S., I have seen firsthand how teams struggle to retain talent due to burnout. For instance, a security engineer may manage endpoint protection, vendor risk assessments, and phishing simulations all alone, which unsurprisingly leads to fatigue and burnout. This isn’t a people problem; it’s a structural one.

The Gender and Inclusion Gap

Cybersecurity remains one of the least gender-diverse fields in tech. As a WiCyS DFW Affiliate Ambassador, I’ve been involved in championing programs that encourage women and girls to consider cybersecurity careers. Still, systemic barriers persist lack of mentorship, unconscious bias, and absence of flexible work options.
“Representation matters,” I say during sessions with my mentees. “When young girls see someone who looks like them defending a network or advising a government, it changes their perception of what’s possible.” If we are to solve the workforce crisis, diversity must be more than a checkbox, it must be a strategy.

Upskilling: A Personal Journey

When I began my career, cybersecurity certifications were expensive (they still are) and often inaccessible, especially for students in the Global South. Through determination and financial sacrifice, I earned an NCSC-accredited MSc in Cybersecurity from Robert Gordon University in the UK, an achievement that opened doors for me to serve in leadership roles and influence policy. Upskilling has been my bridge over systemic limitations. Today, I encourage professionals to pursue micro-certifications, participate in Capture the Flag (CTF) challenges, and contribute to open-source security projects. Some of the most promising security engineers succeeding today have no formal degree but they demonstrate deep technical skills and problem-solving ability. This is a result of certifications, hands-on projects, and participating in competitive security exercises like CTF.
“Degrees are important,” I tell people. “But talent and ability is priceless.”

Recruitment Reimagined

Organizations must evolve beyond the conventional metrics of degrees and tenure when addressing the persistent cybersecurity talent shortage. Instead, hiring managers should prioritize candidates based on aptitude, adaptability, and a willingness to learn qualities that often transcend formal credentials. Through partnerships with coding boot camps, virtual labs, and apprenticeship programs, employers are now tapping into a broader, more diverse talent pool. This includes individuals from non-traditional backgrounds such as former educators, military veterans, and self-taught technologists who bring fresh perspectives and problem-solving acumen to cybersecurity roles.

Training the Next Generation

As a doctoral researcher in cybersecurity, I am acutely aware of the importance of curriculum innovation. Classrooms must simulate real-world attacks. Students must work on real-time incident response cases. Lecturers must include ethical hacking, policy, and compliance in their teachings not as electives, but as core modules. Real-life breach simulations and AI-based risk modeling must be integrated to prepare students for modern cyber challenges. This experiential learning approach is key to producing talent that’s ready on day one.

Policy and Public-Private Collaboration

Governments have a role to play in solving this crisis. For example, Nigeria’s National Cybersecurity Policy is a commendable step, but implementation remains a challenge. Tax incentives for cybersecurity startups, grants for training programs, and public-private partnerships are urgently needed to build sustainable talent pipelines.

In the U.S., state-level initiatives like the Texas Cybersecurity Council and federal funding for STEM education are promising. However, more must be done to streamline certification pathways and provide visa opportunities for global talent.
I think Cybersecurity is a team sport, and governments must be team leaders, not spectators.

Hope on the Horizon

Despite the challenges, I remain hopeful. I have met brilliant young minds with no formal training who have remarkable ideas and are building innovative systems. I’ve seen women in unpleasant environments transition from administrative roles to cybersecurity through evening classes. The crisis is real, but so is the resolve. If we continue to invest in upskilling, diversify our recruitment, and remove systemic barriers, we will not only bridge the gap but we will redefine the global cybersecurity workforce for the better. “For me, this is more than a career. It is a calling. And the call is clear: the time to act is now.