Nearly half of cybersecurity leaders are working 11 or more extra hours per week.