Period
to 21 February 2019

The following table provides summary statistics for permanent job vacancies advertised in the South East with a requirement for CISM qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 21 February 2019 with a comparison to the same period in the previous 2 years.

ISACA Certified Information Security Manager (CISM)
England > South East
6 months to
21 Feb 2019
Same period 2018 Same period 2017
Rank 303 295 387
Rank change year-on-year -8 +92 +19
Permanent jobs citing CISM 236 310 182
As % of all permanent IT jobs advertised in the South East 0.88% 0.98% 0.58%
As % of the Qualifications category 3.03% 3.70% 1.98%
Number of salaries quoted 153 240 173
South East median annual salary £60,000 £60,000 £60,000
10th Percentile £40,000 £43,750 £48,750
90th Percentile £79,500 £100,000 £80,000
England median annual salary £65,000 £65,000 £65,000

CISM is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies advertised in the South East with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
South East
Permanent vacancies requiring academic qualifications or professional certifications 7,777 8,380 9,207
As % of all permanent IT jobs advertised in the South East 28.97% 26.53% 29.23%
Number of salaries quoted 5,824 6,685 7,356
South East median annual salary £45,000 £45,000 £45,000
10th Percentile £25,500 £25,000 £25,563
90th Percentile £71,750 £67,800 £68,750
England median annual salary £50,000 £47,500 £45,000
% change year-on-year +5.26% +5.56% -

CISM
Job Vacancy Trend in the South East

Job postings citing CISM as a percentage of all IT jobs advertised in the South East.

Job vacancy trend for CISM in the South East

CISM
Salary Trend in the South East

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing CISM in the South East.

Salary trend for CISM in the South East

CISM
Salary Histogram in the South East

The salary distribution of IT jobs citing CISM in the South East over the 6 months to 21 February 2019.

Salary histogram for CISM in the South East

CISM
Job Locations in the South East

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CISM within the South East region over the 6 months to 21 February 2019. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
Thames Valley +30 105 £60,000 - 11
Berkshire +18 69 £60,750 +1.25% 8
Hampshire +13 48 £65,000 +11.11% 2
Surrey -27 39 £60,000 +4.35% 7
Oxfordshire +64 32 £57,500 -6.12% 1
East Sussex +32 25 £60,000 -2.04% 1
Kent +21 11 £61,250 -12.50% 6
West Sussex -15 7 £45,000 -7.69% 2
Buckinghamshire +7 4 £60,000 +9.09% 2
CISM
England

For the 6 months to 21 February 2019, IT jobs citing CISM also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads across the South East region with a requirement for CISM.

1 228 (96.61%) CISSP
2 175 (74.15%) Information Security
3 126 (53.39%) ISO/IEC 27001
4 119 (50.42%) Cybersecurity
5 112 (47.46%) CISA
6 79 (33.47%) Management Information System
7 76 (32.20%) Firewall
8 66 (27.97%) CEH
9 58 (24.58%) SIEM
10 57 (24.15%) Vulnerability Management
11 55 (23.31%) Risk Management
11 55 (23.31%) Finance
11 55 (23.31%) Security Operations
12 53 (22.46%) Degree
13 47 (19.92%) Data Protection
13 47 (19.92%) Linux
14 46 (19.49%) PCI DSS
15 45 (19.07%) CRISC
16 44 (18.64%) ITIL
17 43 (18.22%) SANS
18 41 (17.37%) Network Security
19 40 (16.95%) SSCP
20 38 (16.10%) OWASP
20 38 (16.10%) Security Operations Centre
21 36 (15.25%) GDPR
21 36 (15.25%) Microsoft Azure
22 35 (14.83%) Security Management
23 34 (14.41%) Amazon AWS
24 32 (13.56%) Information Security Management
24 32 (13.56%) Windows

CISM
Co-occurring IT Skills in the South East by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 8 (3.39%) ExpressionEngine
1 8 (3.39%) WordPress
2 5 (2.12%) IIS
3 3 (1.27%) SharePoint
Applications
1 3 (1.27%) Microsoft Excel
2 1 (0.42%) Microsoft Office
Business Applications
1 4 (1.69%) SAP GRC
2 2 (0.85%) Infor M3
Cloud Services
1 36 (15.25%) Microsoft Azure
2 34 (14.41%) Amazon AWS
3 13 (5.51%) IaaS
4 9 (3.81%) SaaS
5 8 (3.39%) Office 365
6 5 (2.12%) PaaS
7 1 (0.42%) Azure Active Directory
Communications & Networking
1 76 (32.20%) Firewall
2 41 (17.37%) Network Security
3 19 (8.05%) Intrusion Detection
4 16 (6.78%) Internet
5 13 (5.51%) SCCP
6 7 (2.97%) WAN
7 6 (2.54%) VPN
8 5 (2.12%) Intranet
8 5 (2.12%) SAN
9 4 (1.69%) IPsec
9 4 (1.69%) TCP/IP
10 3 (1.27%) LAN
11 2 (0.85%) Broadband
11 2 (0.85%) Cisco ISE
11 2 (0.85%) FTP
11 2 (0.85%) NetScaler
11 2 (0.85%) Radio Access Network
11 2 (0.85%) SSL
11 2 (0.85%) Wireless
Database & Business Intelligence
1 12 (5.08%) Big Data
1 12 (5.08%) Geospatial Data
2 8 (3.39%) MongoDB
General
1 55 (23.31%) Finance
2 25 (10.59%) Legal
3 9 (3.81%) Telecoms
4 6 (2.54%) Manufacturing
5 4 (1.69%) Publishing
6 2 (0.85%) Banking
7 1 (0.42%) Law
7 1 (0.42%) Retail Banking
7 1 (0.42%) Spanish Language
Job Titles
1 62 (26.27%) Analyst
2 49 (20.76%) Security Manager
3 47 (19.92%) Security Analyst
4 34 (14.41%) Security Engineer
5 32 (13.56%) Information Manager
6 31 (13.14%) Information Security Manager
7 30 (12.71%) Consultant
8 29 (12.29%) IT Engineer
8 29 (12.29%) IT Security Engineer
9 25 (10.59%) Security Consultant
9 25 (10.59%) Senior Security Engineer
10 22 (9.32%) Senior IT Engineer
11 18 (7.63%) Senior Analyst
12 16 (6.78%) Data Manager
12 16 (6.78%) Data Protection Manager
13 15 (6.36%) Information Analyst
13 15 (6.36%) Information Security Analyst
13 15 (6.36%) Vulnerability Analyst
14 14 (5.93%) Cybersecurity Analyst
15 13 (5.51%) Senior Cybersecurity Analyst
Libraries, Frameworks & Software Standards
1 8 (3.39%) Node.js
2 5 (2.12%) REST
3 2 (0.85%) SAP Basis
4 1 (0.42%) .NET
4 1 (0.42%) LAMP
4 1 (0.42%) WF
Miscellaneous
1 79 (33.47%) Management Information System
2 38 (16.10%) Security Operations Centre
3 25 (10.59%) Distributed Denial-of-Service
4 17 (7.20%) Data Protection Act
5 16 (6.78%) Analytical Skills
6 13 (5.51%) Cyber Kill Chain
7 9 (3.81%) Public Cloud
8 7 (2.97%) Cyberattack
8 7 (2.97%) PKI
9 5 (2.12%) LIMS
9 5 (2.12%) Self-Motivation
10 4 (1.69%) Data Centre
10 4 (1.69%) Driving Licence
10 4 (1.69%) NHS
11 2 (0.85%) Algorithms
11 2 (0.85%) CESG
11 2 (0.85%) Cyber Defence
12 1 (0.42%) Analytical Mindset
12 1 (0.42%) Cyberthreat
12 1 (0.42%) Robotics
Operating Systems
1 47 (19.92%) Linux
2 32 (13.56%) Windows
3 1 (0.42%) CentOS
Processes & Methodologies
1 175 (74.15%) Information Security
2 119 (50.42%) Cybersecurity
3 58 (24.58%) SIEM
4 57 (24.15%) Vulnerability Management
5 55 (23.31%) Risk Management
5 55 (23.31%) Security Operations
6 47 (19.92%) Data Protection
7 44 (18.64%) ITIL
8 38 (16.10%) OWASP
9 35 (14.83%) Security Management
10 32 (13.56%) Information Security Management
11 28 (11.86%) Risk Assessment
12 25 (10.59%) Stakeholder Management
13 22 (9.32%) Computer Science
13 22 (9.32%) Data Privacy
14 21 (8.90%) Incident Management
14 21 (8.90%) Security Testing
15 20 (8.47%) Agile Software Development
16 19 (8.05%) TOGAF
17 18 (7.63%) Logistics
Programming Languages
1 1 (0.42%) C
1 1 (0.42%) C#
1 1 (0.42%) JavaScript
Qualifications
1 228 (96.61%) CISSP
2 112 (47.46%) CISA
3 66 (27.97%) CEH
4 53 (22.46%) Degree
5 45 (19.07%) CRISC
6 43 (18.22%) SANS
7 40 (16.95%) SSCP
8 23 (9.75%) OSCP
9 20 (8.47%) Cisco Certification
10 19 (8.05%) Security Cleared
11 16 (6.78%) (ISC)2 CCSP
11 16 (6.78%) Computer Science Degree
12 15 (6.36%) CCSP
12 15 (6.36%) CREST Certified
13 14 (5.93%) GIAC
14 12 (5.08%) Microsoft Certification
15 8 (3.39%) Master's Degree
16 6 (2.54%) BPSS Clearance
16 6 (2.54%) CESG Certified Professional
16 6 (2.54%) MCP
Quality Assurance & Compliance
1 126 (53.39%) ISO/IEC 27001
2 46 (19.49%) PCI DSS
3 36 (15.25%) GDPR
4 27 (11.44%) Cyber Essentials
5 20 (8.47%) COBIT
6 6 (2.54%) Cyber Essentials PLUS
6 6 (2.54%) ISO 22301
7 5 (2.12%) HMG Security Policy Framework
7 5 (2.12%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 4 (1.69%) ISO 9001
9 2 (0.85%) RMADS
9 2 (0.85%) Sarbanes-Oxley
10 1 (0.42%) COSO
10 1 (0.42%) HIPAA
10 1 (0.42%) NIST 800
System Software
1 10 (4.24%) Active Directory
2 6 (2.54%) VMware Infrastructure
3 1 (0.42%) Snort
Systems Management
1 15 (6.36%) CSIRT
1 15 (6.36%) Nessus
2 4 (1.69%) OSSEC
3 3 (1.27%) QRadar
4 2 (0.85%) CASB
4 2 (0.85%) Single Sign-On
Vendors
1 25 (10.59%) Microsoft
2 24 (10.17%) Oracle
3 18 (7.63%) Qualys
4 11 (4.66%) Cisco
5 10 (4.24%) Rapid7
5 10 (4.24%) Symantec
6 6 (2.54%) IBM
6 6 (2.54%) McAfee
6 6 (2.54%) VMware
7 5 (2.12%) Splunk
8 4 (1.69%) ArcSight
8 4 (1.69%) Barracuda Networks
8 4 (1.69%) Centrify
8 4 (1.69%) SAP
8 4 (1.69%) Tripwire
9 3 (1.27%) Citrix
9 3 (1.27%) Palo Alto
9 3 (1.27%) Sophos
10 2 (0.85%) CheckPoint
10 2 (0.85%) Forcepoint