Blog
Insights for Hiring in Critical Tech and Cybersecurity Roles
Here we share practical insights on IT recruitment, cybersecurity hiring and talent shortages — helping companies secure specialists for critical roles.
Categories
Articles
-
Cybersecurity & Resilience
EU Commission takes member states to court over NIS2 — what companies need to know
By Sebastian BachThe Commission referred Ireland, Spain, France and the Netherlands to the CJEU for delayed NIS2 transposition — impact on compliance, supervision and operators in Germany.
Reading time 5 min -
Cybersecurity & Resilience
EU Action Plan on Cybersecurity and Artificial Intelligence — briefing for companies
By Sebastian BachThe EU Action Plan on Cybersecurity and AI links AI, cybersecurity, SOC, CERT, critical infrastructure, the AI Act and Cyber Solidarity Act — explained for decision-makers.
Reading time 5 min -
Talent Market & Shortage
In-demand cybersecurity skills in 2026
By Sebastian BachAI security, cloud, zero trust and incident response dominate 2026 — practical skill framing for HR and CISOs based on market and WEF data.
Reading time 7 min -
Talent Market & Shortage
Cybersecurity talent shortage in Europe: why companies must rethink now
By Sebastian BachEurope's cybersecurity workforce gap of roughly 424,000 roles is structural, not cyclical. What NIS2, critical infrastructure/OT and the EU Human Capital Recommendation mean for hiring and retention.
Reading time 8 min -
Cybersecurity & Resilience
Cyber Resilience Act: designation of conformity assessment bodies begins
By Sebastian BachFrom June 2026, designation of CRA conformity assessment bodies starts — certification, notified bodies, product security and compliance explained for manufacturers.
Reading time 4 min -
Talent Market & Shortage
Upskilling instead of hiring: how companies tackle the cybersecurity talent shortage
By Sebastian BachISC2 Security Training Trends 2026: 73% higher budgets, AI as top priority (47%), time as main barrier (53%) — why role-based upskilling often beats external hiring alone.
Reading time 7 min -
Cybersecurity & Resilience
EU Tech Sovereignty Package: digital sovereignty for chips, cloud and cybersecurity
By Sebastian BachThe EU Tech Sovereignty Package bundles Chips Act 2.0, the Cloud and AI Development Act, an open-source strategy and an energy roadmap — impact on industry, critical infrastructure and IT procurement.
Reading time 6 min -
IT Recruitment & Hiring Strategy
How AI is changing recruitment for IT and cybersecurity talent
By Sebastian BachAI in IT and cybersecurity recruitment: guardrails, human-in-the-loop, bias risks, screening and active sourcing as complement — what automation delivers and where human judgement stays essential.
Reading time 7 min -
ICS & OT Security
NIS2 and IEC 62443: A practical implementation guide for OT environments
By Sebastian BachNIS2 and IEC 62443 in OT environments: how organisations close Article 21 gaps, define SuC and SL2, run gap assessments along FR1/2/6, and align CRA requirements.
Reading time 7 min -
Cybersecurity & Resilience
Cyber Europe 2026: Europe’s largest cyber exercise focuses on transport and critical infrastructure
By Sebastian BachCyber Europe 2026 tests incident response and crisis management for energy, transport and telecom — what companies can learn for their own resilience programmes.
Reading time 6 min -
Cybersecurity & Resilience
Cyber Resilience Act: manufacturers prepare for new conformity requirements
By Sebastian BachConformity assessment, notified bodies, product documentation and CE marking — what manufacturers must prepare now for CRA conformity.
Reading time 5 min -
ICS & OT Security
Zero Trust in OT: Why classic IT concepts are not enough
By Sebastian BachZero Trust in OT needs different logic than office IT: CISA April 2026 guidance, ISA/IEC 62443 outcomes, passive monitoring, safety first, and a different definition of breach.
Reading time 8 min -
Talent Market & Shortage
The cybersecurity job market in 2026: what companies need to know
By Sebastian BachA 2026 cybersecurity labour-market overview: skill gaps over headcount, hybrid roles, functions not unicorns — decision logic for CISOs and HR, not hiring methodology.
Reading time 7 min -
IT Recruitment & Hiring Strategy
Skill-based hiring in IT: why competencies matter more than degrees
By Sebastian BachSkill-based hiring in IT and cybersecurity: capabilities over titles, risk-aligned staffing, soft skills and demonstrable competence — why degrees alone fall short and how employers can adapt.
Reading time 7 min -
Cybersecurity & Resilience
AI Cybersecurity 2026: How AI Is Becoming the Ultimate Hacker
By Sebastian BachAI is transforming cybersecurity in 2026 - from autonomous vulnerability discovery to new executive roles. What leaders need to know.
Reading time 4 min -
ICS & OT Security
Industrial security: companies launch CRA and NIS2 readiness projects
By Sebastian BachGap assessment, SBOM, secure-by-design, IEC 62443 and OT security — how industrial firms structure CRA and NIS2 readiness programmes and avoid typical pitfalls.
Reading time 6 min -
Cybersecurity & Resilience
NIS2 registration deadline in Germany: what low registration numbers mean for employers
By Sebastian BachGermany's NIS2 registration deadline has passed, yet many potentially in-scope entities appear unregistered. What this means for risk, insurance and hiring priorities.
Reading time 12 min -
Cybersecurity & Resilience
Ransomware Trends 2026: Why Companies Are Fighting Back
By Sebastian BachRansomware is evolving - but so are companies. Explore why fewer firms pay and the rise of cyber negotiation experts.
Reading time 3 min -
Cybersecurity & Resilience
Cyber Resilience Act: first implementation guidelines published
By Sebastian BachThe European Commission has published guidelines for applying the Cyber Resilience Act — secure development lifecycle, vulnerability management, manufacturer duties and CE marking explained for decision-makers.
Reading time 6 min -
Cybersecurity & Resilience
NIS2 in organisations: what applies to you — and what to do (Germany)
By Sebastian BachNIS2 explained in plain language: which sectors and company sizes fall under German rules (BSIG), what day-to-day tasks look like — and where BSI tools help. With a view to people and delivery. For international readers operating in Germany.
Reading time 8 min -
ICS & OT Security
Why OT security becomes an executive priority in 2026
By Sebastian BachIT/OT convergence, NIS2 management liability, CRA product lifecycle and board accountability: why OT security must be decided at executive level in 2026.
Reading time 7 min -
IT Recruitment & Hiring Strategy
IT recruitment in 2026: global trends employers need to understand
By Sebastian BachIT recruitment trends for 2026: global workforce data from ISC2, WEF, OECD and industry research — talent gaps, cybersecurity, AI, candidate experience and what recruitment must deliver strategically.
Reading time 8 min -
IT Recruitment & Hiring Strategy
Key recruiting KPIs: time-to-hire — measure, benchmark, improve
By Sebastian BachTime-to-hire vs time-to-fill: clear definitions, typical bottlenecks in tech and security hiring, benchmarks and levers — with Workable, SHRM, Indeed, Personio, Greenhouse and LinkedIn for context.
Reading time 4 min -
ICS & OT Security
IEC 62443 in recruiting: why industrial cybersecurity profiles are especially scarce in 2026
By Sebastian BachHow IEC 62443 functions as a hiring signal in 2026, which OT-oriented cybersecurity profiles are truly delivery-ready, and how to design realistic industrial search mandates.
Reading time 11 min -
Talent Market & Shortage
Cybersecurity talent shortage explained: what market data actually tells us
By Sebastian BachA plain-language guide to Gartner and Statista cybersecurity market signals, and how employers can translate them into practical hiring decisions.
Reading time 13 min -
Cybersecurity & Resilience
Cybersecurity Governance 2026: Why Boards Are Now Accountable
By Sebastian BachCybersecurity is now a boardroom issue. Discover how regulations and risk exposure are reshaping executive responsibility.
Reading time 3 min -
ICS & OT Security
IT talent market 2026: what it means for critical infrastructure recruiting
By Sebastian BachHow Bitkom 2026 labor-market data translates into hiring reality for critical infrastructure and industrial mandates: time-to-hire, scarce profiles, regional constraints and active sourcing.
Reading time 11 min -
IT Recruitment & Hiring Strategy
Active Sourcing Explained: Definition, Process & IT Hiring (Tech & Security)
By Sebastian BachWhat active sourcing means for tech and security hiring: proactive outreach vs inbound, engaging passive candidates, tools, ethics and KPIs — plus EU and German labour-market context for specialist IT roles and long-tail queries like “what is active sourcing”.
Reading time 5 min -
ICS & OT Security
OT security: market reality, risk trends, and hiring priorities for industry and critical infrastructure
By Sebastian BachA practical guide for companies hiring OT security talent: current threat landscape, IEC 62443 context, recurring hiring bottlenecks, and a clear 12-month execution model.
Reading time 13 min -
Cybersecurity & Resilience
Cyber resilience explained: practical foundations, regulatory context, and execution model for companies
By Sebastian BachA plain-language foundation article on cyber resilience: clear definitions, NIS2/DORA/CRA context, identity and cloud implications, plus a practical 12-month execution roadmap.
Reading time 13 min -
IT Recruitment & Hiring Strategy
Recruiting KPI: time-to-fill — define, measure, improve
By Sebastian BachTime-to-fill for tech and security hiring: clean definition vs time-to-hire, drivers, benchmarks and levers — with Workable, SHRM, Indeed, LinkedIn and Gartner.
Reading time 4 min -
ICS & OT Security
IEC 62443 explained — the essential standard for industrial cybersecurity
By Sebastian BachUnderstand the IEC 62443 standard family: zones and conduits, security levels, lifecycle roles, and how it differs from ISO 27001 — with practical guidance for manufacturers and operators.
Reading time 8 min -
Cybersecurity & Resilience
Digital Operational Resilience Act (DORA): what it contains — and why it exists
By Sebastian BachDORA explained for decision-makers: EU digital resilience for the financial sector — ICT risk, incident reporting, third‑party registers, critical ICT providers and ESA oversight — with official EIOPA and EBA entry points.
Reading time 5 min -
Cybersecurity & Resilience
EU Cybersecurity Act: what it regulates — and how it applies in Germany so far
By Sebastian BachThe EU Cybersecurity Act (2019/881): permanent ENISA mandate and a harmonised EU cybersecurity certification framework for ICT products, services and processes — with Germany’s BSI/NCCA role and practical procurement and assurance implications.
Reading time 5 min -
Cybersecurity & Resilience
EU Cyber Resilience Act (CRA): what companies should know and prepare now
By Sebastian BachThe EU CRA for decision-makers: products with digital elements, lifecycle duties, CE and conformity, and interplay with the EU Cybersecurity Act and ENISA — with Bitkom, OpenKRITIS, trade and policy context.
Reading time 11 min -
Cybersecurity & Resilience
EU AI Act: what is in it — and what does it mean for my organisation?
By Sebastian BachThe EU AI Act in plain language: risk tiers, prohibited practices, transparency duties, and obligations across the value chain. A decision-maker briefing with official EU entry points — implementation and hiring implications.
Reading time 5 min -
IT Recruitment & Hiring Strategy
Why classic IT recruitment strategies no longer work
By Sebastian BachClassic IT recruitment is failing in 2026: why post-and-pray, job ads and inbound-only models fall short for IT and security roles — skills-first hiring, AI in TA, vacancy risk and internal mobility as the alternative.
Reading time 7 min -
IT Recruitment & Hiring Strategy
Recruiting KPI: offer acceptance rate — measure quality at the offer stage
By Sebastian BachOffer acceptance rate (OAR): formula, benchmarks, common rejection drivers and levers for tech and security hiring — with SHRM, CIPD, LinkedIn, Deloitte and Personio for context.
Reading time 4 min