ISACA Certified in Risk and Information Systems Control (CRISC)
UK

The following table provides summary statistics for permanent job vacancies with a requirement for CRISC qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 2 June 2024 with a comparison to the same period in the previous 2 years.

6 months to
2 Jun 2024
Same period 2023 Same period 2022
Rank 694 746 965
Rank change year-on-year +52 +219 -137
Permanent jobs citing CRISC 212 200 301
As % of all permanent jobs advertised in the UK 0.20% 0.21% 0.18%
As % of the Qualifications category 0.76% 0.62% 0.66%
Number of salaries quoted 166 173 187
10th Percentile £37,500 £45,450 £41,250
25th Percentile £56,250 £53,750 £52,750
Median annual salary (50th Percentile) £68,500 £70,000 £65,000
Median % change year-on-year -2.14% +7.69% +8.33%
75th Percentile £84,750 £82,500 £86,250
90th Percentile £105,000 £101,500 £105,000
UK excluding London median annual salary £65,000 £57,500 £60,000
% change year-on-year +13.04% -4.17% +14.29%

All Academic and Professional Certifications
UK

CRISC is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for academic qualifications or professional certifications.

Permanent vacancies requiring academic qualifications or professional certifications 27,942 32,039 45,768
As % of all permanent jobs advertised in the UK 26.55% 33.80% 27.07%
Number of salaries quoted 17,249 14,523 19,205
10th Percentile £28,668 £32,000 £30,932
25th Percentile £38,524 £42,500 £40,750
Median annual salary (50th Percentile) £53,818 £60,000 £55,000
Median % change year-on-year -10.30% +9.09% -
75th Percentile £71,000 £77,500 £73,750
90th Percentile £87,500 £95,000 £91,250
UK excluding London median annual salary £50,000 £52,500 £50,000
% change year-on-year -4.76% +5.00% -

CRISC
Job Vacancy Trend

Job postings citing CRISC as a proportion of all IT jobs advertised.

Job vacancy trend for CRISC in the UK

CRISC
Salary Trend

3-month moving average salary quoted in jobs citing CRISC.

Salary trend for CRISC in the UK

CRISC
Salary Histogram

Salary distribution for jobs citing CRISC over the 6 months to 2 June 2024.

Salary histogram for CRISC in the UK

CRISC
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CRISC within the UK over the 6 months to 2 June 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +102 208 £68,500 +5.38% 35
UK excluding London +4 141 £65,000 +13.04% 11
Work from Home +10 67 £47,500 -32.14% 14
London +93 65 £82,500 +10.00% 26
South West +12 54 £68,500 -10.46% 1
North of England +52 31 £40,000 -19.19% 3
South East -8 26 £47,500 -5.00% 2
North West +1 24 £40,000 -19.19% 1
Midlands -25 15 £61,500 +11.82% 1
East of England -3 13 £65,000 -7.14% 1
West Midlands -26 13 £58,000 +5.45%
Yorkshire +66 6 £60,000 -4.00% 2
Scotland -70 1 - - 1
East Midlands - 1 £77,500 - 1
North East - 1 - -
Channel Islands - 1 £100,000 -

CRISC
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 1 (0.47%) SharePoint
Applications
1 20 (9.43%) Microsoft Office
2 19 (8.96%) Microsoft Excel
3 1 (0.47%) MS Visio
Business Applications
1 2 (0.94%) Ripple
Cloud Services
1 28 (13.21%) AWS
2 24 (11.32%) Azure
3 18 (8.49%) GCP
3 18 (8.49%) Microsoft 365
4 11 (5.19%) Power Platform
5 6 (2.83%) Cloud Computing
6 1 (0.47%) IaaS
6 1 (0.47%) PaaS
6 1 (0.47%) SaaS
Communications & Networking
1 29 (13.68%) Firewall
2 19 (8.96%) TCP/IP
3 18 (8.49%) Network Security
4 16 (7.55%) DNS
5 6 (2.83%) VPN
6 5 (2.36%) Intrusion Detection
7 4 (1.89%) NetScaler
8 2 (0.94%) Intranet
8 2 (0.94%) LAN
8 2 (0.94%) WAN
9 1 (0.47%) Cisco IPT
9 1 (0.47%) SAN
Database & Business Intelligence
1 11 (5.19%) Power BI
2 2 (0.94%) Big Data
3 1 (0.47%) Data Warehouse
Development Applications
1 17 (8.02%) Jenkins
2 2 (0.94%) Artifactory
2 2 (0.94%) Git
3 1 (0.47%) JIRA
General
1 98 (46.23%) Finance
2 47 (22.17%) Social Skills
3 23 (10.85%) Analytical Skills
4 17 (8.02%) Inclusion and Diversity
5 14 (6.60%) Law
5 14 (6.60%) Telecoms
6 13 (6.13%) Influencing Skills
7 12 (5.66%) Presentation Skills
8 11 (5.19%) Legal
9 8 (3.77%) Marketing
10 6 (2.83%) Financial Institution
10 6 (2.83%) Retail
11 5 (2.36%) Banking
12 4 (1.89%) Manufacturing
13 3 (1.42%) Aerospace
14 2 (0.94%) Electronics
14 2 (0.94%) Investment Banking
15 1 (0.47%) Advertising
15 1 (0.47%) Agriculture
15 1 (0.47%) Pharmaceutical
Job Titles
1 59 (27.83%) Consultant
2 56 (26.42%) Security Consultant
3 33 (15.57%) Analyst
4 31 (14.62%) Senior
5 28 (13.21%) Lead
6 24 (11.32%) Architect
6 24 (11.32%) Risk Analyst
7 21 (9.91%) Security Manager
8 19 (8.96%) Security Architect
9 17 (8.02%) Security Analyst
10 12 (5.66%) Enterprise Architect
10 12 (5.66%) Enterprise Security Architect
11 11 (5.19%) Managing Consultant
11 11 (5.19%) Risk Manager
12 10 (4.72%) Information Manager
12 10 (4.72%) Information Security Manager
12 10 (4.72%) Security Engineer
13 9 (4.25%) Senior Architect
14 8 (3.77%) IT Risk Analyst
14 8 (3.77%) Risk Officer
Libraries, Frameworks & Software Standards
1 2 (0.94%) Web Services
Miscellaneous
1 52 (24.53%) Management Information System
2 22 (10.38%) Operational Technology
3 20 (9.43%) Security Posture
4 16 (7.55%) PKI
5 14 (6.60%) Cyber Threat
6 8 (3.77%) Self-Motivation
7 7 (3.30%) Cyber Security Posture
7 7 (3.30%) Public Cloud
8 5 (2.36%) Cloud Native
8 5 (2.36%) Data Centre
8 5 (2.36%) Replication
9 3 (1.42%) Client/Server
9 3 (1.42%) Cyberattack
10 2 (0.94%) Blockchain
10 2 (0.94%) Cyber Defence
10 2 (0.94%) e-Learning
10 2 (0.94%) Onboarding
10 2 (0.94%) Product Ownership
10 2 (0.94%) Social Media
11 1 (0.47%) Legacy Systems
Operating Systems
1 24 (11.32%) Windows
2 5 (2.36%) Windows Server
3 3 (1.42%) Linux
Processes & Methodologies
1 151 (71.23%) Cybersecurity
2 137 (64.62%) Risk Management
3 95 (44.81%) Information Security
4 43 (20.28%) Problem-Solving
5 38 (17.92%) Information Assurance
6 37 (17.45%) Security Architecture
7 32 (15.09%) Data Protection
8 28 (13.21%) Decision-Making
9 25 (11.79%) ITIL
9 25 (11.79%) Vulnerability Management
10 24 (11.32%) Incident Management
11 22 (10.38%) Continuous Improvement
12 21 (9.91%) Threat Modelling
13 20 (9.43%) Risk Assessment
13 20 (9.43%) Roadmaps
13 20 (9.43%) Security Management
14 19 (8.96%) Architectural Patterns
14 19 (8.96%) Incident Response
15 18 (8.49%) Stakeholder Management
15 18 (8.49%) Threat Intelligence
Programming Languages
1 24 (11.32%) Python
2 5 (2.36%) C
2 5 (2.36%) Java
2 5 (2.36%) R
2 5 (2.36%) Scala
2 5 (2.36%) SQL
Qualifications
1 171 (80.66%) CISM
2 164 (77.36%) CISSP
3 84 (39.62%) CISA
4 68 (32.08%) Security Cleared
5 63 (29.72%) SC Cleared
6 52 (24.53%) Degree
7 37 (17.45%) CESG Certified Professional
8 29 (13.68%) ISO 27001 Lead Auditor
9 26 (12.26%) GIAC
10 21 (9.91%) ISO 27001 Lead Implementer
11 20 (9.43%) ISSMP
12 19 (8.96%) CEH
13 15 (7.08%) CASP
13 15 (7.08%) Cisco Certification
14 12 (5.66%) ISACA
14 12 (5.66%) SANS
15 8 (3.77%) (ISC)2 CCSP
15 8 (3.77%) CompTIA Security+
15 8 (3.77%) Computer Science Degree
16 7 (3.30%) CCNA
Quality Assurance & Compliance
1 76 (35.85%) ISO/IEC 27001
2 59 (27.83%) NIST
3 41 (19.34%) GRC
4 37 (17.45%) GDPR
5 31 (14.62%) COBIT
6 21 (9.91%) NCSC
7 19 (8.96%) Cyber Essentials
8 17 (8.02%) PCI DSS
9 9 (4.25%) Cyber Essentials PLUS
10 5 (2.36%) ISO/IEC 27005
10 5 (2.36%) NIST 800
11 4 (1.89%) COSO
11 4 (1.89%) HMG Security Policy Framework
11 4 (1.89%) ISO 31000
12 3 (1.42%) ITGC
12 3 (1.42%) Sarbanes-Oxley
13 2 (0.94%) GLBA
13 2 (0.94%) ISO 22301
13 2 (0.94%) ISO 9001
13 2 (0.94%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
System Software
1 5 (2.36%) VMware NSX
2 2 (0.94%) Active Directory
3 1 (0.47%) VMware Infrastructure
Systems Management
1 17 (8.02%) Ansible
2 1 (0.47%) Computer Emergency Response Teams
2 1 (0.47%) Computer Incident Response Team
Vendors
1 28 (13.21%) Microsoft
2 16 (7.55%) Alibaba
3 12 (5.66%) Google
4 9 (4.25%) Cisco
4 9 (4.25%) Dell
5 8 (3.77%) Citrix
6 5 (2.36%) Meraki
6 5 (2.36%) VMware
7 4 (1.89%) ServiceNow
8 3 (1.42%) OneTrust
9 2 (0.94%) Fortinet
9 2 (0.94%) Rapid7