Period
to 24 November 2017

The following table provides summary statistics for contract job vacancies with a requirement for PCI QSA qualifications. Included is a benchmarking guide to the contractor rates offered over the 6 months to 24 November 2017 with a comparison to the same period in the previous 2 years.

Note that daily and hourly rates are treated separately in these statistics. When calculating contractor rate percentiles, daily rates are never derived from quoted hourly rates or vice versa.

PCI Qualified Security Assessors (PCI QSA)
UK
6 months to
24 Nov 2017
Same period 2016 Same period 2015
Rank 882 861 878
Rank change year-on-year -21 +17 -17
Contract jobs citing PCI QSA 14 25 16
As % of all contract IT jobs advertised in the UK 0.014% 0.024% 0.014%
As % of the Qualifications category 0.073% 0.12% 0.070%
Number of daily rates quoted 3 5 12
UK median daily rate £400 £500 £450
Median daily rate % change year-on-year -20.00% +11.11% -
10th Percentile £211 £430 £350
90th Percentile £465 £610 £574
UK excluding London median daily rate £290 £475 £550
% change year-on-year -38.98% -13.59% +22.22%
Number of hourly rates quoted 0 0 1
UK median hourly rate - - £39.51
UK excluding London median hourly rate - - -

PCI QSA is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK
Contract vacancies requiring academic qualifications or professional certifications 19282 21637 22697
As % of all contract IT jobs advertised in the UK 18.71% 20.61% 19.82%
Number of daily rates quoted 11828 13510 13678
UK median daily rate £425 £413 £400
Median daily rate % change year-on-year +3.03% +3.13% +2.56%
10th Percentile £220 £244 £244
90th Percentile £600 £588 £575
UK excluding London median daily rate £400 £388 £385
% change year-on-year +3.23% +0.65% +4.05%
Number of hourly rates quoted 904 874 1093
UK median hourly rate £25.69 £25.75 £25.00
Median hourly rate % change year-on-year -0.23% +3.00% +31.58%
10th Percentile £12.00 £12.14 £12.00
90th Percentile £50.00 £49.19 £49.50
UK excluding London median hourly rate £27.50 £27.00 £25.06
% change year-on-year +1.85% +7.74% +31.89%

PCI QSA
Job Vacancy Trend

Job postings citing PCI QSA as a percentage of all IT jobs advertised.

Job vacancy trend for PCI QSA in the UK

PCI QSA
Contractor Daily Rate Trend

This chart provides the 3-month moving average for daily rates quoted in contract jobs citing PCI QSA.

Contractor daily rate trend for PCI QSA in the UK

PCI QSA
Contractor Daily Rate Histogram

The daily rate distribution of IT jobs citing PCI QSA over the 6 months to 24 November 2017.

Contractor daily rate histogram for PCI QSA in the UK

PCI QSA
Top 6 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing PCI QSA within the UK over the 6 months to 24 November 2017. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -19 12 £400 -17.95% 18
UK excluding London +35 10 £290 -38.98% 12
South East +6 9 £400 -11.11% 3
London -25 1 - - 7
East Midlands - 1 £180 -
Midlands - 1 £180 - 1

For the 6 months to 24 November 2017, IT contractor jobs citing PCI QSA also mentioned the following skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all contract ads with a requirement for PCI QSA.

1 14 (100.00%) CISSP
1 14 (100.00%) ISO/IEC 27001
1 14 (100.00%) PCI DSS
2 12 (85.71%) Information Security
3 10 (71.43%) Risk Management
4 9 (64.29%) CISM
5 8 (57.14%) Legal
5 8 (57.14%) CISA
6 7 (50.00%) Security Management
6 7 (50.00%) ISO 27001 Lead Auditor
7 6 (42.86%) IT Audit
7 6 (42.86%) Security Operations
7 6 (42.86%) Telecoms
8 5 (35.71%) Risk Assessment
8 5 (35.71%) Business Continuity
8 5 (35.71%) Security Monitoring
9 4 (28.57%) SANS
9 4 (28.57%) Stakeholder Management
9 4 (28.57%) Stakeholder Engagement
9 4 (28.57%) PA-DSS
9 4 (28.57%) ISO/IEC 27005
9 4 (28.57%) GDPR
9 4 (28.57%) CESG Certified Professional
9 4 (28.57%) NIST 800
10 2 (14.29%) ISMS
10 2 (14.29%) Security Cleared
11 1 (7.14%) HIPAA
11 1 (7.14%) Degree
11 1 (7.14%) COBIT
11 1 (7.14%) WSUS

PCI QSA
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

General
1 8 (57.14%) Legal
2 6 (42.86%) Telecoms
3 1 (7.14%) Banking
3 1 (7.14%) Finance
3 1 (7.14%) Retail
Job Titles
1 6 (42.86%) Compliance Specialist
1 6 (42.86%) Security Compliance Specialist
1 6 (42.86%) Security Specialist
2 4 (28.57%) Consultant
2 4 (28.57%) Security Consultant
3 3 (21.43%) Senior Consultant
3 3 (21.43%) Senior Security Consultant
4 2 (14.29%) Analyst
4 2 (14.29%) Associate Consultant
4 2 (14.29%) Compliance Analyst
4 2 (14.29%) Security Analyst
4 2 (14.29%) Security Compliance Analyst
5 1 (7.14%) Architect
5 1 (7.14%) Audit Consultant
5 1 (7.14%) Information Architect
5 1 (7.14%) Information Security Architect
5 1 (7.14%) Junior
5 1 (7.14%) Senior Analyst
5 1 (7.14%) Senior Compliance Analyst
5 1 (7.14%) Senior Security Analyst
Miscellaneous
1 1 (7.14%) Cyberthreat
1 1 (7.14%) Management Information System
Processes & Methodologies
1 12 (85.71%) Information Security
2 10 (71.43%) Risk Management
3 7 (50.00%) Security Management
4 6 (42.86%) IT Audit
4 6 (42.86%) Security Operations
5 5 (35.71%) Business Continuity
5 5 (35.71%) Risk Assessment
5 5 (35.71%) Security Monitoring
6 4 (28.57%) Stakeholder Engagement
6 4 (28.57%) Stakeholder Management
7 2 (14.29%) ISMS
8 1 (7.14%) Cybersecurity
8 1 (7.14%) Document Management
8 1 (7.14%) Incident Management
8 1 (7.14%) Information Security Management
8 1 (7.14%) Infrastructure Management
8 1 (7.14%) OWASP
8 1 (7.14%) Patch Management
8 1 (7.14%) Service Management
8 1 (7.14%) TOGAF
Qualifications
1 14 (100.00%) CISSP
2 9 (64.29%) CISM
3 8 (57.14%) CISA
4 7 (50.00%) ISO 27001 Lead Auditor
5 4 (28.57%) CESG Certified Professional
5 4 (28.57%) SANS
6 2 (14.29%) Security Cleared
7 1 (7.14%) CLAS
7 1 (7.14%) Degree
Quality Assurance & Compliance
1 14 (100.00%) ISO/IEC 27001
1 14 (100.00%) PCI DSS
2 4 (28.57%) GDPR
2 4 (28.57%) ISO/IEC 27005
2 4 (28.57%) NIST 800
2 4 (28.57%) PA-DSS
3 1 (7.14%) COBIT
3 1 (7.14%) HIPAA
3 1 (7.14%) HMG Security Policy Framework
Systems Management
1 1 (7.14%) WSUS
Vendors
1 1 (7.14%) Forcepoint
1 1 (7.14%) Symantec