Olufunke Tonye-Preghafi: The rise of African women in cybersecurity and why the momentum must not stall

Africa’s digital economy is expanding rapidly, with mobile money and online services becoming commonplace across the continent. As more organisations shift to online platforms, the demand for cybersecurity professionals grows proportionally. Banks, fintech companies, telecom providers, government entities, and other businesses require experts capable of identifying risks, addressing threats, and designing secure systems from the outset.

As both an advocate for women in the field and a finance leader, I observe firsthand how the costs of cyber risks and talent shortages directly impact an organization's bottom line. Cybersecurity is no longer solely the domain of the IT department; it is a critical workforce investment, risk-pricing, and increasingly, a financial decision that should be evaluated by finance leadership.

The emergence of African women in cybersecurity is a development that warrants greater attention. It is not merely a matter of representation; Africa requires a more skilled workforce in cybersecurity, and women are a vital component of that talent pool. Women are increasingly assuming roles in security operations, governance, risk and compliance, technology, policy, and other areas within the cybersecurity sector.

The individuals entering the industry today will play a crucial role in shaping how African organizations respond to emerging cyber threats. These threats will grow in complexity as businesses adopt artificial intelligence, cloud technologies, digital identity systems, and other interconnected services. Consequently, the cybersecurity workforce must not only possess technical expertise but also diverse experiences and perspectives.

There is a widespread misconception about the nature of cybersecurity careers. Not every role demands expertise in software engineering or penetration testing. Cybersecurity professionals are needed in various fields, including law, policy, risk management, compliance, data analysis, communication, and understanding the broader impact of technology on businesses and society.

Governance, risk, and compliance (GRC), in particular, intersects closely with finance and business strategy. Assessing an organization's cyber risk exposure, incorporating that risk into enterprise risk frameworks, and determining the allocation between prevention and response are financial judgments as much as they are technical ones.

For women who have built careers in finance, audit, risk management, or business strategy, the analytical foundation required for a cybersecurity career is already in place. However, the primary barrier preventing them from transitioning to a cybersecurity career is the perception that the door remains closed. Expanding this perspective can open up more opportunities for women to enter and advance within the industry.

Creating more opportunities for women in cybersecurity is only part of the challenge; retaining them and supporting their professional growth is equally important. Organizations must establish clear career paths, provide mentorship, and offer leadership opportunities to women. Senior professionals must actively sponsor emerging talent and create pathways for the next generation.

Visibility is equally crucial; young women considering a career in cybersecurity should see other women succeeding in the field, making the possibility more attainable. Universities, regulators, professional bodies, and businesses all play a role in cultivating this pipeline. Africa’s digital transformation is accelerating, as are the associated risks.

We cannot afford to overlook capable people while the demand for cybersecurity expertise continues to rise. The progress African women are making in cybersecurity is promising. To sustain this momentum, we must provide the necessary opportunities, mentorship, and leadership pathways, thereby not only increasing the number of women in cybersecurity but also building a stronger cybersecurity industry for Africa.