Don't think the talent pool is small. It's the budget. InfoSec is seen as a huge money sink in the eyes of many unfortunately.