For years, the global cybersecurity community has relied on the annual Cybersecurity Workforce Study from ISC2 to quantify the widening chasm between the demand for security professionals and the available talent pool. While these reports have served as a critical barometer for the industry, ISC2 is now shifting from a role of observation to one of active intervention. On October 20, the organization announced the formation of the Cyber-AI Workforce Coalition, a strategic initiative designed to navigate the turbulent intersection of artificial intelligence and professional security standards.
This move marks a significant milestone in the tenure of Scott Beale, who assumed the role of CEO at ISC2 in December 2025. The coalition represents one of his first major policy shifts, signaling a more assertive posture for the nonprofit association as it grapples with the rapid integration of AI into both enterprise environments and the threat landscape. Speaking at the ISC2 Security Congress 2026 in Denver, Colorado, on October 26, Beale reflected on his initial months at the helm, noting that the coalition was born out of a direct response to member feedback.
During his first six months in the CEO chair, Beale conducted a comprehensive listening tour, engaging with ISC2 members across the globe to understand their most pressing professional anxieties. A recurring theme emerged from these consultations: a profound desire for the organization to move beyond traditional certification and advocacy, and instead become a vocal, ambitious leader in the realms of AI safety and security. According to Beale, the message from the membership was clear—they require a roadmap to survive and thrive in an era where AI is fundamentally rewriting the rules of the digital defense sector.
Mapping the AI Security Workforce and Its Emerging Skills Gap
The newly formed Cyber-AI Workforce Coalition is envisioned as a "vendor-neutral convener," a bridge intended to connect various stakeholders within the global cybersecurity ecosystem. Rather than catering to a single corporate interest, the coalition aims to bring together a diverse cohort, including CISOs, human resources leaders, government representatives, and standard-setting bodies. By fostering this collaborative dialogue, ISC2 hopes to gain a clearer understanding of how AI is fundamentally altering the day-to-day responsibilities of cybersecurity practitioners.
One of the primary challenges identified by Beale is the lack of a standardized language for roles that sit at the intersection of AI and security. While institutions such as the U.S. National Institute of Standards and Technology (NIST) have made commendable strides in updating security frameworks to account for AI, the practical application of these standards in the job market remains inconsistent. Beale pointed out that the current landscape is fragmented; a banking institution, a healthcare provider, and a retail giant may each have urgent needs for AI-savvy security professionals, yet they lack a common vocabulary to define, advertise, and assess the necessary skill sets for those positions.
This ambiguity creates a significant hurdle for both recruiters and applicants. For employers, it is difficult to determine which specific competencies are vital for defending AI models or leveraging AI to counter advanced threats. For practitioners, the path to upskilling is often obscured by the rapid pace of technological change and the lack of a clear industry benchmark for what constitutes "AI security expertise." Beale emphasized that the coalition serves as a platform to listen directly to these practitioners and employers, ensuring that the association’s output remains grounded in the realities of the modern workforce.
The uncertainty surrounding future demand is palpable. The industry is currently in a state of flux, grappling with questions about whether AI will replace entry-level roles, amplify the need for highly specialized security engineers, or necessitate a total overhaul of the existing workforce development model. By establishing this coalition, ISC2 is positioning itself to provide the empirical data and industry consensus needed to navigate these unknowns.
Practical Tools to Define and Hire for AI Security Roles
In its operational approach, the Cyber-AI Workforce Coalition is eschewing the creation of rigid, top-down standards. Instead, it is focusing on the development of practical, actionable toolkits. These resources are intended to empower employers, providing them with the necessary frameworks to describe, recruit, and manage talent within the AI security domain. These toolkits will serve as a guide for HR departments and hiring managers to help them articulate the specific demands of AI-related security roles, thereby reducing the friction in the hiring process.
The focus of these tools is holistic, covering the lifecycle of talent management from the initial drafting of a job description to the ongoing development and organization of security teams. For the individual practitioner, the coalition’s efforts are meant to clarify the professional journey, providing insights into which skills are currently most valued and how to best build the expertise required to thrive in a security-conscious, AI-driven organization.
This initiative also complements the organization’s broader educational strategy, including the development of a new AI security certification. Beale underscored that while the certification is a vital component of the solution, it is not intended to be a panacea. The coalition operates on the belief that the challenge of AI security is too complex for any single entity to solve in isolation. By inviting input from across the sector, ISC2 aims to create a more resilient and adaptable professional landscape.
Looking ahead, the coalition is set to hold its inaugural meeting in November. The project timeline is ambitious; Beale expressed hope that the coalition would produce its first series of toolkits by the spring of 2027. Following this development phase, the tools will be tested in a pilot program with a select group of companies. The objective is to refine these materials based on real-world hiring outcomes before making them available to the wider community.
Ultimately, the resources produced by the coalition are intended to be accessible to everyone, regardless of their status as an ISC2 member. Beale believes that the value of this project extends beyond the association’s immediate membership, potentially serving as a foundational resource for universities, academic institutions, and other certification bodies. By fostering a shared understanding of the AI security workforce, the coalition seeks to help educational providers adapt their curricula to better align with the future needs of the industry, ensuring that the next generation of security professionals is equipped to meet the challenges of the AI era. Through this collaborative, toolkit-driven approach, ISC2 is attempting to transform the current climate of uncertainty into a structured path forward for the entire global cybersecurity profession.
