Socura report highlights rapid growth in UK cyber security workforce

FinTech Wales’ member Socura has published its latest research report, A wave in cyber, analysing cyber security employment trends across the UK using Office for National Statistics (ONS) occupation data.

The report examines how the cyber security workforce has evolved since 2021, when cyber security roles were first tracked by the ONS Annual Population Survey. It follows on from a previous Socura report published in 2024 and explores industry growth, workforce diversity and regional distribution.

Cyber security now among the UK’s fastest-growing occupations

One of the key findings from A wave in cyber is that cyber security is now the fifth fastest-growing occupation in the UK. Since 2021, the number of people working in cyber security roles has grown to almost 84,000, representing a 196% increase over four years.

During this period, cyber security has overtaken several long-established professions, including bricklaying, architecture and farming, all of which had a similar workforce size to cyber security in 2021.

Improving, but persistent, skills gaps

The report also highlights changes in the ratio of cyber security professionals to UK businesses. In 2021, there was one cyber security specialist for every 196 businesses. By June 2025, this had improved to one for every 68 businesses.

While this reflects a significant increase in hiring, the findings suggest that many organisations still lack in-house cyber security expertise. The report notes the ongoing importance of managed security service providers in supporting organisations to strengthen their cyber defences.

The role of people in an evolving cyber landscape

A wave in cyber considers how emerging technologies, including artificial intelligence, are shaping the cyber security sector. While it is too early to assess AI’s impact within the latest ONS data, the report references commentary suggesting that AI is being used to augment, rather than replace, cyber security professionals, with expectations that new specialisms will emerge as a result.

The report also points to the anticipated impact of the Cyber Security and Resilience Bill, which is expected to increase demand for cyber security skills by introducing stricter standards for organisations, particularly those delivering essential services and operating within critical supply chains.

Diversity and regional challenges remain

Despite strong overall growth, the report identifies areas where further progress is needed. In 2021, women represented 23% of the cyber security workforce. Although the number of women working in cyber security has increased by 163% since then, their overall share of the workforce has fallen slightly to 21%.

Geographical concentration also remains a challenge. According to the findings, 29% of the UK’s cyber security workforce is currently based in London and the South East, highlighting ongoing regional disparities in access to cyber talent.

The report includes commentary from industry voices, including Dr Clare Johnson, Founder of Women in Cyber Unlimited, who highlights the importance of initiatives such as the CyberFirst Girls Competition and the growth of cyber networks in supporting new and diverse talent into the sector.

A mainstream profession

Overall, A wave in cyber charts the emergence of cyber security as a mainstream profession in the UK, reflecting its growing importance in protecting organisations and national infrastructure from cyber threats.

The full report includes further analysis and expert commentary, including insights from Socura CEO Andrew Kays and other industry experts.

Access the full report here