Women are making significant strides in the field of cybersecurity and in some cases, are even outpacing men in some categories, but progress aside there are still areas that could use improvement.

Despite being outnumbered three to one, a recent (ISC)² study found more women are joining the field of cybersecurity and are subsequently gunning for leadership roles.

The (ISC)² Cybersecurity Workforce Study: Women in Cybersecurity report found that on average, women are getting higher levels of education and more certifications than their male counterparts with 52 percent of women holding post graduate degrees compared to only 44 percent of their male counterparts.

The study also found that higher numbers of women are forging paths to leadership with seven percent of women cybersecurity professionals reaching the level of chief technology officer compared to two percent of men, nine percent of women cybersecurity professionals are reaching the title of vice president versus five percent of men, and 18 percent of women reaching the title of IT director as opposed to 14 percent of men.

Women cybersecurity pros were also found to be younger on average – 45 percent of are millennials compared to 33 for men. However, men making up the majority of Generation X cybersecurity pros at 44 percent compared to 25 percent being women.

“According to the survey, women working in cybersecurity currently account for about one quarter (24 percent) of the overall workforce,” researchers said in the report. “This is a significantly higher finding than from 2017, when only 11 percent of study respondents were women. It should be noted that this study used a revised research methodology, which likely accounts for the larger representation of women.”

The change could be attributed to researchers counting certified cybersecurity professionals in official cybersecurity functions as well as IT/ICT professionals who spend at least 25 percent of their time working on cybersecurity responsibilities in an effort to better define the cybersecurity workforce.

The study did however, find issues concerning pay as researches found on average women reported earning less than men although some of this could be explained by age and tenure.

“If women cybersecurity professionals as a group are younger than men, fewer have worked in the field as long as most male counterparts, so that may be a cause for some discrepancy,” the report said. “But this doesn’t erase the reality revealed in previous research that women in cybersecurity managerial positions earn about $5,000 less than men, indicating there is still an issue that needs to be addressed.”

A separate study conducted by Cybersecurity Ventures and other firms predicted women will represent more than a fifth of the global cybersecurity workforce by the end of the year, according to a March 29 press release.

The new data also predicted the number of women CISOs at Fortune 500 companies will rise to 20 percent in 2019, compared with 13 percent in 2017, figures that are consistent with new research from Boardroom Insiders which states that 20 percent of Fortune 500 global chief information officers (CIOs) are now women.

“Given that increasing the number of women in cybersecurity is a goal that many companies hold, we should all be pleased that we have started making progress,” BeecherMadden Chief Operations Officer and founder Karla Reffold said in the release. “18 percent still doesn’t go far enough, and while 50 percent may seem far away, there are some companies at this level already.”