7 August 2025
Japan's security talent problem in plain numbers
Japan has 110,000 unfilled security roles. Offshore pen testers who cannot read the room. AI tools blocked by six-month compliance reviews. The gap is structural, not cyclical.
Japan's 110,000-role cybersecurity gap, its structural causes, what government programmes are doing, and where the offshore staffing model is creating new risks.
Japan has 110,000 unfilled cybersecurity roles. The gap is structural, not cyclical: a consequence of two decades of IT outsourcing that hollowed out domestic technical capability. Government programmes are doing the right things at insufficient scale. Offshore practitioners are filling gaps in ways that introduce their own risks. AI tools help in some places and face compliance friction in others. This beat examines who is actually doing the security work in Japan FSI, what that means for vendors designing their delivery models, and where the talent situation is genuinely improving.