IT leaders rank cyber security among their top concerns, yet the scarcity of IT talent and lack of development opportunities for new entrants leaves organizations struggling to meet the challenge, according to a global survey of senior IT managers released today by ManpowerGroup’s (NYSE: MAN) Experis division.

The survey found cyber security is the most frequently cited in-demand skill set globally at 32%, nearly twice as much as the next mentioned skill set, software development at 18%. This perceived talent shortage aligns with market data which suggest the gap between supply and demand for cyber security professionals globally will be nearly 1.5 million workers by 2019, according to the report.

Some firms are turning to contractors to augment their internal staff. The survey found 40% of respondents currently use contractors in information security. Of these, 27% are planning to increase their use of contractors, while 40% will maintain the same level.

The report also found that that two-thirds of organizations still rely on a single resourcing strategy: 52% only use permanent employees, while 15% only use contractors. The study concludes that the best results tend to come from hybrid models — used by 33% of employers — that combine in-house teams with third-party expertise.

“The information security threat is one of the biggest risks organizations face today, but as the demand for skilled professionals skyrockets, there simply aren’t enough of them to go around,” said Ram Chandrashekhar, global head of ManpowerGroup’s Experis business. “Employers need to anticipate their growing talent needs, implement development plans for current employees and create a robust talent strategy for the future.”

The survey was conducted in 2015 and included more than 1,000 people across 10 countries.