Is there really a shortage of cybersecurity professionals in Ghana?

Yes, according to both the regulator and the industry. The Cyber Security Authority has said the skills gap is widening, and the interim president of the Ghana Cybersecurity Industry Forum said in 2026 that the country does not have enough people. Nobody has published a reliable national headcount, so the size of the gap is an estimate.

Do I need accreditation from the Cyber Security Authority to work in cybersecurity?

The Cybersecurity Act, 2020 requires cybersecurity service providers to be licensed and cybersecurity professionals to be accredited, and the Authority says it is enforcing this. Which roles and activities are covered depends on the function you perform, so read the Authority's licensing and accreditation pages before you offer services professionally.

What does an entry-level cybersecurity job involve?

Most careers start at the monitoring desk, as a security operations centre (SOC) analyst: watching alerts, triaging incidents and escalating the ones that look real. From there people branch into areas such as penetration testing, IT audit, network security and incident response.

What does a cybersecurity professional earn in Ghana?

Published estimates disagree widely. Entry-level figures run from roughly GHS 2,500 to GHS 8,500 a month depending on the source, and senior roles are reported from about GHS 7,000 to over GHS 40,000. Treat these as direction rather than a quote, because some rest on small samples.

Cybersecurity Careers in Ghana: Why Demand Is Growing Faster Than Supply

Somewhere in Accra tonight, someone is watching a queue of security alerts. Most of them will turn out to be noise. One of them might not be. The person watching could work at a bank, a telecom or a government agency, and according to the people who run the industry, there are not enough of them.

“We do not have enough people” is not a marketing line. It is what the interim president of the Ghana Cybersecurity Industry Forum told a press conference this year, and it echoes what the national regulator has been saying for longer. This piece looks at why the gap exists, what the evidence for it actually is, and what it means if you are thinking about stepping into it.

The shortage is real. So is the distance between a shortage and a job.

How a law created a job market

In 2020 Ghana passed the Cybersecurity Act, known as Act 1038, which created the Cyber Security Authority (CSA) to regulate the field. For careers, the important part is what the Act asks of organisations. It allows the government to designate critical information infrastructure, a category that covers systems run by government, financial institutions and telecoms, and the owners of that infrastructure must register their systems, report incidents and undergo periodic security audits.

It regulates the people too. Since 1 March 2023 the CSA has been licensing cybersecurity service providers and accrediting cybersecurity establishments and professionals. The Authority's acting Director-General has warned that anyone operating as a cybersecurity professional without proper accreditation is in breach of the law, and said the CSA is actively enforcing the framework.

Why this matters for a career

Demand that comes from a legal obligation is sturdier than demand that comes from a trend. Audits and incident reports are required whether or not an organisation feels like paying attention, and each one needs someone who knows what they are doing.

A security analyst watching a screen of alerts — Most careers start here, in the alert queue, not in a film-style hack.

What the threat looks like on paper

The numbers on cybercrime in Ghana are patchier than the headlines suggest. One figure that is on the record: the CSA told a 2024 symposium that the cybercrime reports it received in 2023 amounted to about GHS 49 million in losses, roughly $4 million. That counts only what was reported to the Authority.

The shape of the threat matters as much as its size. The Forum's interim president has warned that criminals are becoming more adaptive, taking an attack method that works in one sector and reusing it in another. For defenders that means the work does not stay inside a single industry, which is one reason security skills tend to transfer between banks, telecoms and public bodies.

Why supply cannot keep up

A global shortage, and a global market

In 2024 the CSA's then Director-General, Dr Albert Antwi-Boasiako, said the world is short of about 4.8 million cybersecurity professionals and that the gap was widening in Ghana, where many experts were leaving to work abroad. Another account of the problem describes the same pattern: professionals lured away by higher-paying opportunities elsewhere. Ghana is not only short of people; it is competing for them with employers who can pay more.

The scarcest skills are the advanced ones

The same speech named where the shortage bites hardest: artificial intelligence, cloud computing, zero trust architecture, incident response and application security. These are not first-week skills. The gap is widest above entry level, which is worth knowing because it shapes where you aim after your first role.

A pipeline that is only now being built

The Authority has said it would work with the Ghana Tertiary Education Commission to build cybersecurity into university curricula, and the Forum's president describes the need as a deliberate, continuous pipeline of people entering the profession. He also made a point that is easy to skip past: increasing the numbers is not enough unless newcomers are properly prepared. Hold on to that sentence. It matters when we get to how to start.

A caution about the numbers

You will find precise-looking figures online, such as a shortage of “over 5,000” professionals or annual losses of GHS 300 million, attributed to national bodies. We could not trace them to a published source, so we have left them out. What can be said is this: the regulator and the industry body both say there are too few people, and nobody has published a reliable national count.

What the work looks like

If your picture of the job comes from films, adjust it. The usual entry point is the security operations centre, where a Tier 1 analyst monitors alerts, triages incidents and escalates the ones that look real. It is less hoodie, more queue. It is also a good place to learn what normal looks like, which is the only way to spot what is not.

Branch: testing and breaking

Penetration testers simulate attacks to find weaknesses before someone else does. The role asks for more technical depth in networking, scripting and tools, and it is where certifications such as CEH and OSCP are usually mentioned.

Branch: checking and proving

IT auditors assess controls, compliance and risk, with demand reported as growing in banking and financial services. Given what Act 1038 asks of regulated organisations, this is arguably the branch where the law and the job description meet most directly. CISA is the certification most often attached to it.

Branch: building and watching

Network security engineers configure and manage firewalls, VPNs and intrusion detection, while information security analysts design and run the protections that keep an organisation's systems safe. Both draw on the same foundations as the monitoring desk.

What it pays, and why the sources disagree

Salary data for Ghana's security roles is thin, and it shows. Entry-level estimates in published guides run from roughly GHS 2,500 to GHS 8,500 a month depending on the source, and senior roles are reported anywhere from about GHS 7,000 to over GHS 40,000. When estimates differ by a factor of three or more at every level, the honest conclusion is that nobody has reliable figures.

Treat as direction

What the sources do agree on is the shape: pay rises steeply with experience and specialisation, and the top of the range sits far above the bottom. Some salary websites also rest on a handful of self-reported entries, so a number is only as good as its sample.

Who this suits

A shortage tells you the market needs people. It does not tell you the work will suit you. A fair way to check:

Suits you if

You are curious about how things break, and why
You can stay patient with logs, alerts and documentation
You are happy to keep learning long after the first job
You are comfortable starting in a monitoring role and growing from there

Think twice if

You want the fastest route to a first tech job (web development is usually quicker)
You expect to start by hacking, not by watching queues
You dislike process, compliance and paperwork
You are drawn to it only because it is a growth area

The lead of the CSA's national emergency response team made the last point in his own terms when he urged students to treat continuous learning as an attitude, not a phase.

Numbers will not fill the gap. Prepared people will.

How to start

Remember the Forum's warning: it is not enough to add people, they have to be prepared. Preparation looks like this.

Learn how computers and networks work
Operating systems, networking basics and how the web moves data. It is tempting to skip, and it is the part everything else rests on.
Learn to read what machines say
Logs, alerts and error messages. A monitoring desk is mostly reading, so practise it on purpose.
Pick one structured credential
An entry certification such as CompTIA Security+ gives you a syllabus and a recognisable line on a CV. Treat it as a map of what to learn, not a golden ticket.
Practise in safe labs
Use intentionally vulnerable practice environments and capture-the-flag exercises, never systems you do not own, and write up what you did as you go. Those write-ups are the start of a portfolio.
Learn the local rules
Read the CSA's licensing and accreditation pages and an outline of Act 1038. Audit and compliance work is part of the demand, and knowing the framework is useful whichever branch you choose.
Aim at the gap
Once you have a first role, move toward the scarce areas the CSA named: cloud, incident response and application security.

A laptop with a terminal window open on a desk — Preparation is mostly practice: labs, logs and write-ups.

Build the groundwork first

Security careers are built on fundamentals: how computers, networks and code work. No single course turns you into an analyst, but Prodigee's Computer Science and Technology categories are a sensible place to build that groundwork before you specialise. And if a security career is not what you are after, the basics still pay off. We covered security awareness as one of the digital skills employers now expect from people in every kind of role.

Start with the foundations

Courses in computer science and technology to build the groundwork every security role rests on.

Browse courses

Frequently asked questions

Is there really a shortage of cybersecurity professionals in Ghana?: Yes, according to both the regulator and the industry. The Cyber Security Authority has said the skills gap is widening, and the interim president of the Ghana Cybersecurity Industry Forum said in 2026 that the country does not have enough people. Nobody has published a reliable national headcount, so the size of the gap is an estimate.
Do I need accreditation from the Cyber Security Authority to work in cybersecurity?: The Cybersecurity Act, 2020 requires cybersecurity service providers to be licensed and cybersecurity professionals to be accredited, and the Authority says it is enforcing this. Which roles and activities are covered depends on the function you perform, so read the Authority's licensing and accreditation pages before you offer services professionally.
What does an entry-level cybersecurity job involve?: Most careers start at the monitoring desk, as a security operations centre (SOC) analyst: watching alerts, triaging incidents and escalating the ones that look real. From there people branch into areas such as penetration testing, IT audit, network security and incident response.
What does a cybersecurity professional earn in Ghana?: Published estimates disagree widely. Entry-level figures run from roughly GHS 2,500 to GHS 8,500 a month depending on the source, and senior roles are reported from about GHS 7,000 to over GHS 40,000. Treat these as direction rather than a quote, because some rest on small samples.

References

This article draws on the following sources, linked so you can read further.