Singapore IT sector faces burnout, skills gap & talent drain

New research has highlighted significant challenges facing Singapore's IT and cybersecurity workforce, as burnout and a widening skills gap threaten the sector's long-term sustainability.

The Bitdefender 2025 Cybersecurity Assessment Report has revealed that the intensity of workplace stressors for Singaporean IT professionals far outpaces global trends. According to the report, 64% of cybersecurity professionals in Singapore are experiencing burnout, citing the unrelenting pace and complexity of cyber threats.

The report also indicates an alarming attrition risk, with 53% of local respondents planning to leave their current roles within the next year. This figure is well above the global average of 40%, raising concerns about future staffing in a crucial sector for Singapore's economy and infrastructure.

Escalating skills gap

One of the most serious findings relates to the shortage of advanced cybersecurity specialists. Of those surveyed, 59% reported that the skills gap at their organisations has worsened in the past year. The deficit extends beyond general IT skills, with pressing needs emerging for expertise in threat hunting, Living Off the Land (LOTL) detection, and security analytics using artificial intelligence.

Difficulty in bridging these gaps is affecting operational security. The report notes that 39% of respondents view internal skills shortages as the main barrier preventing their organisations from extracting value from deployed security technologies. This impacts their ability to defend proactively against increasingly sophisticated cyberattacks.

The proliferation of security tools and the growing complexity of managing hybrid and multi-cloud environments are compounding these pressures. Many professionals express concerns that the operational load is becoming unsustainable, as teams struggle to keep up with both the quantity and diversity of active threats.

Confidentiality concerns and cultural factors

The report draws attention to the issue of underreporting within the Singaporean cybersecurity field. Among those who experienced a breach in the previous 12 months, 75.7% said they were told to keep it confidential, even in situations where they felt the incident should be disclosed. This is significantly higher than the global average of 58% and points to cultural or compliance-driven pressures that may inhibit transparency and open discussion of security incidents.

Unique pressures in Singapore

"Rapid digitalisation in public and private sectors has accelerated demand faster than the pace of talent development. High compliance expectations intensify the pressure on overstretched teams. A 'don't show weakness' workplace culture may suppress open reporting and further isolate professionals at risk."

This assessment from Bitdefender outlines a combination of systemic and cultural factors causing a feedback loop, where attrition and skills gaps lead to operational gaps and increase the administrative burden on already strained teams. Instead of focusing on building long-term resilience, many teams are forced into a position of reacting to incidents as they arise.

Sector recommendations

"To avoid a worsening talent drain, organisations first acknowledge the unique pressures facing cybersecurity professionals in Singapore, then look to invest in automation, up-skilling, and human-centric strategies that support the wellbeing of security teams. Equally important is meaningful up-skilling, focusing on advanced threat detection, AI-driven analysis, and cloud security to best equip IT teams to act proactively.

This approach stresses the importance of both technological investments and strategies designed to ease the personal strain on IT professionals.

The report warns that without action, the risks associated with high staff turnover extend beyond personnel costs. There is the potential that diminished capacity and lost institutional knowledge could multiply vulnerabilities in the country's digital infrastructure, exposing businesses and public services to greater cyber threats.