Women call for action to build diversity & resilience in cybersecurity

Women in cybersecurity continue to encounter challenges regarding representation and advancement despite notable signs of progress within the sector.

Ruth Okofu, InfoSec Operations Engineer at Lastwall, reflected on her experiences in a male-dominated field. She said:

"In my career leading teams through tough security and compliance programs, I've seen how often women are underestimated or overlooked in cybersecurity. Early on, there were very few women in the room when critical risk decisions were made. That lack of visibility can hold us back, even when the expertise is there. But I've also seen the difference when women are trusted to lead. They deliver results and bring new perspectives that strengthen how teams approach problems. Progress is happening as more women step into leadership roles and mentor others, but we need to go further. Organisations must take real action such as creating fair promotion paths, sponsoring women into decision-making roles, and ensuring their voices are visible at conferences, in research, and within leadership seats. Cybersecurity is about resilience. Resilience comes from diversity. Empowering women isn't just inclusion – it's a strategy for a stronger, more secure industry."

Okofu's remarks highlighted the underrepresentation and underestimation of women when significant decisions about organisational risk are made, citing that the issue persists despite women's expertise in the field.

She added that the landscape has started to shift as more women enter and progress in leadership, but noted the need for more substantive, structural changes in organisational practices. Okofu advocated for deliberate action from businesses, including fair advancement routes, targeted sponsorship for women, and the amplification of their contributions in high-visibility settings such as conferences, published research and leadership roles.

Youth and early stereotypes

Isabel Castillo, Lead Information Security Engineer at Lastwall, drew attention to the cultural factors and stereotypes which influence girls' perceptions of their intelligence and capabilities from an early age. She referenced findings from research conducted by the University of Illinois, New York University (NYU), and Princeton University:

"A study performed by the University of Illinois, NYU, and Princeton University showed that by age 6, girls are more likely to think boys can be 'brilliant' and are 'really, really smart' – a stereotype that continues to be fueled by media, compliments, and marketing. You don't have to look further than animation geared toward children: the predominant message emphasizes girls' looks and boys' capabilities. What this means in terms of cybersecurity is that unless we change that message from a young age, we will continue to see a gender discrepancy in talent pipelines, during meetings, in leadership positions, and at the board level. To see meaningful change, we must begin sending the message to girls that they are incredibly intelligent, smart, and equally capable of performing complex tasks. And this must start early – the education system can benefit from highlighting women's accomplishments in all fields and introducing kid-friendly engineering toys from a young age. Cybersecurity could be gamified in an inclusive way for both girls and boys, with compliments to girls reframed as, 'You are incredibly talented; your intellect is growing with more practice.' Animation can portray geeky, techy heroines who are celebrated for their determination, resilience, diligence, and tech-savviness. I firmly believe that once the message for kids is broadened to include all possibilities – and we consistently give girls these types of encouraging affirmations – we will see more women rise to board positions."

Castillo pointed out that persistent stereotypes reinforced by media and education can inhibit girls' perceptions of their own capabilities and ultimately influence their career choices and prospects in fields such as cybersecurity.

She called for a systemic rethinking in how society and the education system present intelligence and technical savvy, starting from early childhood experiences. Castillo proposed that the portrayal of women and girls in media, especially animation, should shift to highlight technical skill and resilience rather than focusing solely on appearance.

Workplace action and representation

Both Okofu and Castillo expressed that greater representation and visibility of women in cybersecurity at all seniority levels, especially in decision-making and leadership, are vital for expanding the talent pool and strengthening industry outcomes.

Mentorship, sponsorship, and the creation of inclusive workplace cultures that actively address advancement barriers were highlighted as necessary actions for both immediate and sustained change. Okofu emphasised that diversity is central to building resilience in cybersecurity organisations.

Castillo's suggestions pointed to the need for both cultural change and practical interventions, such as gender-inclusive gamification of cybersecurity and more positive reinforcement for girls pursuing technical interests.

The perspectives outlined by Okofu and Castillo reflect ongoing discussions in the cybersecurity sector about diversity, talent development and the importance of supportive environments for women at all career stages.