Cybersecurity post needs a promotion, firms say