Morocco loosens cybersecurity hiring rules as talent shortage and attacks rise

Morocco’s government has eased hiring rules for cybersecurity experts after a rise in cyberattacks exposed shortages in technical talent across the public sector.

A decree signed in March 2026 allows the General Directorate of Information Systems Security (DGSSI), which operates under the National Defense Administration, to recruit specialists on fixed term contracts, replacing a system largely dependent on competitive exams and lengthy administrative procedures. 

“Cyberattacks are evolving rapidly and are increasingly supported by artificial intelligence, making them more complex,” Anas Abou El Kalam, a cybersecurity expert told Hespress, warning that traditional response models are no longer sufficient.

The change follows mounting pressure linked to recent attacks, including a suspected breach targeting the Office of Vocational Training and Employment Promotion, where a hacker claimed to hold more than 400,000 records and released a sample of 100,000 entries online.

 A 2025 cyberattack on the National Social Security Fund exposed data linked to around 2 million workers and 500,000 companies.

Morocco, like many countries, faces a shortage of specialized cybersecurity profiles, while public sector hiring remains slower and less competitive than private and international markets.

Under the new framework, contracts can last up to three years and be renewed, allowing authorities to recruit technical profiles such as network security specialists and incident response analysts more quickly.

“The real challenge is not only attracting talent but keeping it,” said cybersecurity expert Hassan Kharchouj, pointing to the pull of international firms offering higher pay and faster hiring cycles.

The DGSSI continues to monitor vulnerabilities and coordinate responses through its national cybersecurity system, but experts say hiring flexibility alone will not close the gap between rising threats and available expertise.

The reform signals a shift in approach, from rigid administrative recruitment to more flexible hiring mechanisms, as Morocco adapts its cybersecurity strategy to the pace of evolving digital risks.