People are often told that data and cybersecurity are "open to everyone." The truth is more useful: people can enter from different backgrounds, but serious work still requires foundations, evidence and sometimes formal qualifications.

An unrelated or incomplete degree does not automatically exclude you. It also does not allow you to skip the requirements attached to a role.

South Africa's 2024 National List of Occupations in High Demand includes Data Scientist with an indicated minimum at NQF level 7 and ICT Security Specialist at NQF level 6. Other digital occupations on the list have different thresholds. Read the official list and current adverts instead of assuming that one short course qualifies you for every title.

Route one: build towards cybersecurity

Cybersecurity protects systems, networks, information and operations. Entry-level candidates benefit from understanding the technology being protected before learning specialised security tools.

Build the route in this order:

  • Computer foundations: operating systems, files, users, permissions and basic troubleshooting.
  • Networking: addresses, common protocols, routers, firewalls and how devices communicate.
  • Security basics: access control, patching, backups, phishing, logs and incident documentation.
  • Evidence: a safe home lab, clear notes and explanations of what you observed.

Do not attack public systems or demonstrate unauthorised access. Use legal training environments and document the defensive lesson.

Your first realistic target may be IT support, network support, systems administration assistance or another adjacent role. These are not guaranteed stepping stones, but they can build the operational understanding security teams value. Apply directly to junior security roles when you meet the advertised requirements.

Route two: build towards data work

Data work begins long before advanced machine learning. Organisations need people who can collect, clean, check, organise, analyse and explain information.

Build these foundations:

  • Spreadsheets: formulas, lookups, filters, pivot-style summaries and error checking.
  • Data quality: missing values, duplicates, inconsistent categories and clear definitions.
  • SQL: selecting, filtering, joining and aggregating structured data.
  • Communication: explaining what the numbers show, what they do not show and what decision they support.
  • Basic statistics: averages, distributions, rates and the difference between correlation and causation.

Possible nearby titles include reporting assistant, data administrator, data-quality assistant or junior business-intelligence support. Titles vary widely. Judge an advert by its tasks and requirements, not by whether it contains the word "data."

Follow a 12-week evidence plan

During weeks one to four, choose one route and study its foundations. Complete small exercises after every lesson. Watching tutorials without practising can create confidence that disappears during a technical interview.

During weeks five to eight, build two compact work samples.

For cybersecurity, document how you configured users and permissions in a legal practice environment, then explain the risks you checked. For data, clean a public dataset, create a simple summary and write a short decision note.

During weeks nine and ten, review at least 20 Gauteng adverts. Record repeated requirements and compare them with your current evidence. Check NQF levels, experience, certifications and whether a qualification must be recognised.

During weeks eleven and twelve, close one achievable gap and start targeted applications. Create separate CV versions for data and cybersecurity. A recruiter should not have to guess which direction you want.

Make your portfolio easy to trust

Each project should answer six questions:

  • What problem did you address?
  • Where did the data or practice environment come from?
  • What steps did you take?
  • How did you check your result?
  • What did you learn?
  • What are the limitations?

Use public, synthetic or properly authorised information. Remove passwords, personal data and employer secrets. Clear documentation is part of the skill: a complicated project that nobody can understand is weak evidence.

Do not list tools you cannot explain. One well-understood spreadsheet, SQL query or security lab is more persuasive than 30 copied project names.

Spend money only after checking the gate

Before paying for training, compare its content with current adverts. Ask whether the provider and qualification are appropriately recognised, what the total cost is, and whether workplace exposure is included. Be cautious of guaranteed-job claims.

U.S. projections show strong growth for data scientists and information security analysts, but those figures describe the American labour market. They are useful as an international signal, not evidence of a specific South African vacancy.

Your first objective is not to look like a senior specialist. It is to become a credible beginner: grounded in the basics, honest about limitations and able to show work that you genuinely understand.

Sources and limits