

What if you could earn a fully funded master's degree in Cybersecurity while studying at three different European universities? That's exactly what the Erasmus Mundus CyberMACS scholarship offers – and in this guide, I (Meli Imelda, an actual Erasmus Mundus scholar) show you how to get it, step by step, as an African applicant.
If you have been thinking about doing a master's degree in cybersecurity, you have probably gone through the usual rabbit hole. Look up programs, see the tuition fees, close the tab, open a new one, repeat. At some point, you start wondering if there is a smarter way to do this without going broke or taking out a loan you will be paying off for years.
There is. And it is called the Erasmus Mundus program.
In this article, I will walk you through everything you need to know, from what the program is to one specific cybersecurity scholarship opportunity, CyberMACS.
By the time you finish reading this, you will know what it is, how to apply, what documents you need, and how to give yourself the best shot.
Table of Contents
1) What Is the Erasmus Mundus Program?
3) The Three Universities Involved
4) The Study Paths: Year One in Istanbul, Year Two Is Your Choice
5) The Scholarship Options at CyberMACS
9) Other Erasmus Mundus Cybersecurity Programs Worth Knowing
Let's get into it.
The Erasmus Mundus program is funded by the European Union and is one of the most prestigious scholarship programs in the world for graduate students. It funds joint master's degree programs run by a consortium of at least three universities across multiple countries. The idea is that instead of studying at just one university in one country, you move between institutions, collect degrees from more than one of them, and build an international academic experience.
The program is not just about funding, although the funding is very good. It is about being part of a network of scholars, getting exposure to different academic cultures, and coming out on the other side with credentials that carry weight across industries and borders.
You can browse every available Erasmus Mundus program in the official catalog here: Erasmus Mundus Catalog. There are programs across hundreds of fields, from law to public health to engineering to the arts. If you are in any kind of academic or professional field, there is probably something in there for you.
Here is something that trips a lot of people up: not everyone who gets into an Erasmus Mundus program walks away with the full scholarship. There are different funding tracks, and understanding this early on will save you a lot of confusion.
The full Erasmus Mundus scholarship covers tuition, provides a monthly living allowance, and includes travel support. It is competitive, and it is also the one everyone talks about because it is life-changing for most people who receive it.
Then there is merit-based admission without the scholarship. You still get a tuition waiver and, depending on the program, sometimes other forms of support. You are in the same classes as scholarship students, you get the same degrees, and nobody can tell the difference when you graduate.
Finally, there is self-funded admission, where you pay a reduced tuition fee to access the program. For most Erasmus Mundus programs, this fee is a fraction of what you would pay at a comparable university in Europe on your own.
None of these tracks makes you less of a student. Your degree looks the same at the end. But knowing which track you are aiming for and being honest with yourself about your circumstances helps you plan properly.
Among the hundreds of programs in the Erasmus Mundus catalog, I want to focus on CyberMACS: the Erasmus Mundus Joint Master's Degree in Applied Cybersecurity.
If you are in tech, care about digital security, are thinking about moving into cybersecurity, or are already in the field and want a serious international credential, this program deserves your full attention.
Everything about it lives at cybermacs.eu
CyberMACS is a two-year master's program in Applied Cybersecurity, run jointly by three universities across three countries.
You study at two of the three partner universities during your two years and graduate with a degree from both. Two degrees. Two countries. One program.
As program coordinator, Prof. Dr. Hasan Dağ puts it: "Society needs you!" And looking at how fast the cybersecurity landscape is moving, with data breaches, ransomware attacks, and critical infrastructure threats becoming more frequent and more complex, he is not wrong.
Here are the three universities that make up the CyberMACS consortium:
This is the coordinating institution, and where every CyberMACS student spends their first year. Istanbul is one of those rare cities that sits at the intersection of Europe and Asia, literally and culturally. KHAS is a well-regarded private research university with an active campus culture and a faculty that is invested in the students. Students from past cohorts consistently describe the welcome they receive there as warm and community-oriented.
Berlin is Berlin. It has a thriving tech industry, a growing startup ecosystem, and one of the most culturally rich urban environments in Europe. SRH is known for its practically focused approach to education, which aligns perfectly with CyberMACS's goals. Professors here often hold management and research positions at major firms like PwC, EY, and Siemens, which directly enhance the quality of industry connections students have access to.
UKIM is the largest university in North Macedonia and has strong roots in technical and scientific research. Skopje is an accessible, affordable city with a lot of character, and the cybersecurity and cryptography faculty at UKIM brings depth that sets this track apart, especially for students who want to go further on the mathematical and cryptographic side of security.

This is where the program gets interesting. Every CyberMACS student spends their first year at Kadir Has University in Istanbul. Your second year is then either at SRH Berlin in Germany or UKIM in Skopje, North Macedonia, depending on the specialization path you choose.
The first year is dedicated to the fundamentals of cybersecurity. It is designed to bring everyone to the same level before you specialize. The courses taught at KHAS include:
Fall Semester:
Spring Semester:
Beyond the classroom, the first year also includes Cultural Orientation Week and Joint Integration Week, both held in Istanbul, designed to help students from different countries settle in and build community before the program fully gets underway.
You can see the full curriculum details at cybermacs.eu/curriculum.
If you choose Berlin for your second year, you will pick from three specialization tracks:
Advanced Technologies in Cybersecurity leans technical. Core courses include Open-Source Intelligence (OSINT), Security Technologies, Cloud Solutions, and a Cybersecurity Management Project, plus two elective courses chosen from Advanced Data Technologies, Machine Learning, Artificial Intelligence, Big Data and Business Intelligence, and Advanced Security Technologies.
Cybersecurity Management takes a strategic and organizational angle. Core courses include IT Security Management and DevOps, IT Revision and Audit, and the Cybersecurity Management Project, plus three elective courses from the same pool.
Long-Term Practical Training is for students who want hands-on industry experience as part of their degree. SRH connects you with industrial partners, including firms like PwC, EY, and Siemens, for an extended practical work period. Your industry supervisor can be involved in your thesis defense.
Both the Advanced Technologies and Cybersecurity Management tracks finish in the spring semester with a joint thesis supervised by KHAS, a Master Project, and a Thesis Project.
If you choose Skopje, you pick one of two specialization paths:
Web and Cybersecurity covers Applied Cryptography, Digital Trust and Identity, Multimedia and Scalable Web, and two elective courses drawn from options like Mobile and Web Application Security, Biometric Systems, Machine Learning in Information Security, Practical Digital Forensics, and Change and Risk Management.
Cryptology replaces Multimedia and Scalable Web with Coding Theory and Applications, and opens up a deeper pool of electives, including Cryptanalysis, Cryptographic Engineering, Cryptographic Protocols, Mathematical Logic for Computer Science, Advanced Algebraic Structures, and more.
Both paths converge in the spring semester with Advanced Information Security, a Research Project, and a thesis jointly supervised with KHAS.
So if you want to lean toward security management, cloud, AI, and industry connections, Berlin is likely the better fit. If you want to go deeper into cryptography, applied mathematics, and web security, Skopje is the stronger choice. Either way, you graduate with two degrees.
CyberMACS offers distinct admission pathways. The funding structure is one of the most generous for a program of this caliber:
Erasmus Mundus Scholarship: Selected scholars receive €1,400 per month for the full two years, on top of a complete tuition fee waiver. This is the fully funded route. More details on the CyberMACS Scholarships page
Merit-Based Admission I: No monthly stipend, but you get the tuition waiver. KHAS offers part-time research assistant positions to help with living costs, and UKIM provides free housing for students who go to Skopje (you cover your own utility bills).
Merit-Based Admission II: Tuition waiver only. You cover your own living costs. Same program, same degrees, same experience as everyone else.
Affordable Education Track: A flat fee of €5,175 for the entire two-year program. This covers administration, insurance, and all mandatory program activities. Students on this track are encouraged to look into the Erasmus+ Master's Degree Loan, an EU-backed loan with favorable repayment terms.
Regardless of which track you end up on, every student gets a full tuition waiver and comprehensive health and accident insurance. Nobody misses out on the core experience.
Applications go through the official portal at cybermacs.eu/apply. The process has three clear stages:
The application window typically opens around October or November and closes in mid-December. The most recent cycle had a deadline of December 15. Always check the official website for exact dates. You can also read through the Selection Process and Evaluation Criteria pages for a full breakdown of how applications are assessed.
This section trips a lot of people up because there are more moving parts than expected. Here is a breakdown of each document, what it is, and how to approach it well.
1) Motivation Letter: This is the most important piece of your application. The admissions committee reads hundreds of these, and the ones that stand out are not the most polished or most formal ones. They are the most genuine ones. Write about why cybersecurity matters to you personally, the experience that first made you curious about it, and what you plan to do with the skills you gain. Keep it to one or two pages and write it yourself (Yes, better not use 🤖).
2) CV (Europass Format): Your CV is a separate document from your motivation letter. It should follow the Europass format, which is the standard used across European academic and professional applications. Keep it to one or two pages and highlight academic achievements, relevant coursework, technical experience, projects, and any work or volunteer experience that speaks to your fit for the program.
3) Bachelor's Degree or Attestation: You need a completed or near-completed bachelor's in a relevant field, such as computer science, information technology, engineering, or something closely related. If you have not graduated yet, an official attestation letter from your university confirming your expected graduation date is acceptable, as long as you will finish by August of the intake year.
4) Transcript of Records: This is your official academic record listing every course you took and your grades. It needs to come directly from your institution with an official stamp or signature. If it is not in English, you will need a certified translation.
5) Passport: Make sure it is valid for the full duration of the program. If yours is close to expiry, start the renewal process before you apply.
6) Two or Three Recommendation Letters: This is not the place for a letter from the most senior person you know. Pick people who can speak to your curiosity, your work ethic, and your capacity for growth. A professor who supervised your thesis, a manager who watched you work through something difficult, a research mentor who saw your thinking develop over time. Ask them at least two to three weeks before the deadline, and give them your CV and a short note about what CyberMACS is, so they can write something tailored. Letters should be on official letterhead, signed, and dated.
7) English Proficiency Certificate: CyberMACS accepts IELTS, TOEFL iBT, Cambridge, and other recognized tests. Minimum score requirements are listed on the official admission requirements page, so check there for the current thresholds.
For preparation:
8) Proof of Residence: A recent utility bill, rental contract, or official residence certificate. If it is not in English, get a certified translation.
9) Cybersecurity Certificates or Work Experience (if you have them): Any certifications, internships, projects, or relevant work experience. These are not required, but they strengthen your profile. Even a completed online course or a personal project you worked on shows engagement with the field beyond your formal coursework.
10) Publications (optional): If you have published research, include it. If the publication is in another language, include an English translation of the abstract only. The full paper does not need to be translated.
File naming tip: Name every file clearly before uploading. Something like Firstname_Lastname_MotivationLetter.pdf tells the admissions team what they are looking at without them having to open it first. It is a small thing that signals organization.

Getting into CyberMACS is competitive. But competitive does not mean only people with perfect grades and years of experience get in. Here is what helps:
Cyberus is another Erasmus Mundus cybersecurity program with strong standing. It focuses on software security and IoT cybersecurity and is run by universities in France, Luxembourg, Belgium, and Estonia. Students choose between two specialization tracks and complete a five-month international internship as part of the degree. CyberMACS and Cyberus students have collaborated at joint events, including spring schools and CTF competitions, which speaks well of both communities.
CYBERSURE is a newer program with a consortium spanning Norway, Finland, Sweden, Denmark, Estonia, France, and Austria. It covers cybersecurity, privacy, cryptography, and risk management, and is recognized by the European Commission as a program of excellence. The curriculum is developed in close collaboration with leading cybersecurity companies.
For a full picture, go through the Erasmus Mundus Catalog and filter by field of study. New programs are added periodically, and some very good ones do not always get the same visibility as others.
Applying for something like CyberMACS can be intimidating. You will spend time rewriting paragraphs, second-guessing whether your story is interesting enough, whether your grades are strong enough, and whether you have done enough. That is completely normal.
Here is something worth holding onto: the application process itself is valuable, regardless of outcome. Sitting down and figuring out why you want this, what your story is, and where you want your career to go, that clarity is worth something on its own.
There is no application fee. There is nothing to lose by trying.
If you want this, go after it with everything you have. Write a letter that sounds like you. Gather your documents early. Study for the test. Follow the program online and engage with the community. Show up as someone who is ready.
The cybersecurity field is growing faster than universities can train people for it. Somebody is going to be in the next CyberMACS cohort, building the skills to protect systems, institutions, and people across two years and two countries. It might as well be you.
Good luck. I am rooting for you.