As of June 25, 2025, Kenya’s top bank executives are sounding the alarm over an acute shortage of cybersecurity experts, warning that this talent gap has left lenders vulnerable amid a sharp rise in cyber threats.
The Central Bank of Kenya (CBK) recently released its Chief Executive Officers Survey, shedding light on a crisis compounded by outdated systems and escalating costs.
The CBK survey, conducted to evaluate compliance with 2017 cybersecurity guidelines, reveals that Kenyan banks are struggling to attract and retain cybersecurity talent.
With annual budgets ranging from Sh19 million ($147,000) to Sh600 million ($4.6 million), banks are investing heavily in e-security.
However, the shortage of experts and reliance on manual monitoring systems have left most institutions exposed to a 202% surge in cyberattacks, totalling 2.5 billion incidents in the first quarter of 2025, according to the Communications Authority of Kenya (CA).
Interpol has flagged Kenya as a prime target for cybercriminals in East Africa, driven by widespread smartphone use and the rapid adoption of mobile and internet banking.
READ ALSO:Kenya Ranks 11th Globally in Cybersecurity
This vulnerability is particularly acute as Nairobi emerges as a regional tech hub, attracting global cloud, payments, and digital commerce firms.
Root Causes of the Talent Shortage
- Demand Outstripping Supply: Kenya’s digital economy requires 40,000–50,000 cybersecurity professionals, but the current pool stands at just 1,700–2,000, creating a staggering deficit. The influx of fintechs and Big Tech, backed by venture capital, has intensified competition, offering salaries that many banks cannot match.
- Reliance on Manual Systems: The CBK survey highlights that limited access to real-time security technology forces banks to depend on manual monitoring, reducing efficiency and increasing the need for skilled personnel.
- Soaring Costs and Training Gaps: Attracting, retaining, and motivating experts is costly, with banks facing ballooning expenses for technology and training. Universities and training institutions struggle to produce job-ready graduates, and certifications like CISSP and CEH remain expensive barriers.
- Patchy Implementation: Seven years after the 2017 CBK guidelines mandated annual IT audits and board-level reporting, compliance remains inconsistent due to staffing shortages and inadequate tech investments.
The Impact on Kenya’s Banking Sector
This talent crisis has significant repercussions. Banks are failing to meet baseline cybersecurity requirements, leaving them susceptible to sophisticated attacks.
The CA’s data, showing a tripling of cyber threats to 2.5 billion by March 2025, underscores the urgency. Financial losses from digital fraud, estimated at KES 13.3 billion in 2023, are likely to rise without intervention.
Nairobi’s status as a tech hub, while economically beneficial, has turned into a cybersecurity battleground. The competition for talent with fintechs and global firms erodes banks’ security posture, threatening customer trust and regulatory compliance.
READ ALSO:Microsoft and Cyber Shujaa Partner to Train Kenyan Cybersecurity Experts
The Road Ahead for Kenya’s Digital Economy
With cyber threats escalating and the digital economy projected to grow to US$58.03 million by 2029, addressing this shortage is critical.
By 2025’s end, strategic investments in education, technology, and retention could turn this challenge into a competitive advantage, securing Kenya’s financial future.
Ronnie Paul is a seasoned writer and analyst with a prolific portfolio of over 1,000 published articles, specialising in fintech, cryptocurrency, and digital finance at Africa Digest News.
Leave a Reply