With digital transformation and cloud adoption, IT roles are changing to be less hands-on maintenance and more business consultant to help organizations think more strategically about how to leverage technology and improve data security.

According to an article by ZDNet about the changing roles of IT due to cloud adoption, which analyzed a recent survey of large organizations by Denodo, 72% of companies identified managing security, compliance and governance of clouds as top issues, followed by limited skills in managing cloud systems (62%).

"Security, compliance and governance will always be a challenge when first migrating to the cloud, as organizations will need a bird's-eye view across both on-premises and cloud systems, simultaneously, and will need seamless ways to implement security and governance protocols across both systems."

In an article about overcoming cyber talent recruiting challenges from SecurityWeek, one of the toughest challenges cited was finding the right talent for the right position, within budgeting constraints.

"Some companies make the mistake of asking too much from candidates — in the hope that one of them will match their needs. For example, when seeking an entry-level person, they ask for years of work experience and specific security qualifications."

Credit unions, like many small businesses across a variety of industries, struggle to hire experienced cyber talent. They simply can't chase the investment as it isn't a one and done situation – the investments are ongoing to keep up with the rapidly changing and increasingly complex cyber challenges.

"We have a really good internal IT team, but credit unions simply can't afford to hire all the specialists needed – network, database, help desk, cyber. We can't always anticipate our future needs and can't hire for everything," Patty Campbell, president/CEO of the Sterling Heights, Mich.-based Christian Financial Credit Union ($849 million in assets).

Turnover among IT workers at credit unions is much higher than for other positions because, by nature, cyber professionals need to be positioned to continually grow and innovate, and credit unions just don't have the capacity to meet those needs. They typically can't afford experienced cyber professionals, so they hire younger, less experienced employees, who are more abundant and easier to hire, but don't have the mentorship and training to meet the needs of today's businesses, especially in the financial services industry.

Like other small businesses, credit unions have turned to vendors to outsource their IT and cybersecurity work. Credit unions have unique needs which is fueling growth in the number of CUSOs created to provide credit unions with the talent and tools, and most importantly, knowledge of the industry.

Campbell stated, "Working with a CUSO provides us access to specialists – they provide shared resources and experts knowledgeable about credit unions. While we have a great internal IT team, with a trusted partner, they have coaches and mentors we can leverage to develop our staff."

CUSOs specializing in IT and cyber services are able to provide candidates with the cutting-edge technology, culture, higher salary, diversity in work through multiple customers, and peers with whom to learn and innovate – all of which credit unions are unable to provide on their own. But through partnerships with CUSOs, they are able to secure the support they need without the investment to build their own team of experts.

Due to the unique structure of CUSO model, credit unions are positioned to lead other industries in meeting the evolving demand for cybersecurity expertise, and provide members with secure digital experiences for modern banking.

Chris Sachse

Chris Sachse is CEO of Think|Stack, a Baltimore-based managed services CUSO specializing in cybersecurity and cloud solutions.