CISOs rethink hiring to emphasize skills over degrees and experience

• Cybersecurity leaders are increasingly shifting from degree- and experience-based hiring to skills-based recruitment
• Successful implementation requires intentional changes to job descriptions, interview processes, and collaboration with HR
• Organizations using this approach report greater candidate diversity, stronger talent pipelines, and better hiring outcomes

CISOs are moving away from traditional hiring models that prioritize college degrees and years of experience, focusing instead on demonstrable skills relevant to cybersecurity roles. This shift is driven by ongoing talent shortages, the presence of highly capable professionals without formal degrees, and the need for diverse teams with practical problem-solving abilities. Leaders like ISC2’s Jon France have removed degree and certification requirements from many job postings, instead emphasizing traits such as curiosity, communication, and the ability to solve complex technical problems.

Implementing a true skills-based hiring model requires more than editing job listings. Organizations must develop clear criteria for evaluating candidates based on the tasks they’ll actually perform, and interview processes must include scenario-based testing to assess real-world capabilities. Despite growing interest, a 2024 report shows that fewer than 1 in 700 hires reflect genuine skills-based practices, indicating that most companies have yet to make meaningful operational changes.

Companies that have committed to this model, such as ISC2, CyberSN, and Immersive, report notable improvements in candidate quality and workforce diversity. These firms use structured taxonomies, performance-based testing, and customized platforms to evaluate candidates on what they can do rather than what credentials they hold. Ensuring that compensation structures and HR policies support this shift is also essential for long-term success. As cybersecurity continues to evolve rapidly, hiring for skills over credentials is becoming a critical strategy for building resilient and adaptive teams.

Read the full article