Period
to 9 December 2019

The following table provides summary statistics for permanent job vacancies advertised in the UK excluding London with a requirement for CISSP qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 9 December 2019 with a comparison to the same period in the previous 2 years.

(ISC)² Certified Information Systems Security Professional (ISC2 CISSP)
UK > UK excluding London
6 months to
9 Dec 2019
Same period 2018 Same period 2017
Rank 216 187 249
Rank change year-on-year -29 +62 -24
Permanent jobs citing CISSP 1,139 1,662 1,348
As % of all permanent IT jobs advertised in the UK excluding London 1.50% 1.87% 1.34%
As % of the Qualifications category 6.17% 7.44% 5.35%
Number of salaries quoted 856 1,204 978
UK excluding London median annual salary £58,500 £57,500 £53,000
Median salary % change year-on-year +1.74% +8.49% -3.64%
10th Percentile £41,250 £37,500 £37,500
90th Percentile £80,000 £79,625 £75,250
UK median annual salary £62,500 £62,500 £60,000
% change year-on-year - +4.17% -4.00%

CISSP is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies advertised in the UK excluding London with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK excluding London
Permanent vacancies requiring academic qualifications or professional certifications 18,449 22,347 25,212
As % of all permanent IT jobs advertised in the UK excluding London 24.26% 25.20% 25.13%
Number of salaries quoted 13,519 16,349 19,801
UK excluding London median annual salary £45,000 £45,000 £42,500
Median salary % change year-on-year - +5.88% -
10th Percentile £26,250 £25,000 £24,000
90th Percentile £72,312 £70,000 £65,000
UK median annual salary £50,000 £50,000 £47,500
% change year-on-year - +5.26% +5.56%

CISSP
Job Vacancy Trend in the UK excluding London

Job postings citing CISSP as a percentage of all IT jobs advertised in the UK excluding London.

Job vacancy trend for CISSP in the UK excluding London

CISSP
Salary Trend in the UK excluding London

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing CISSP in the UK excluding London.

Salary trend for CISSP in the UK excluding London

CISSP
Salary Histogram in the UK excluding London

The salary distribution of IT jobs citing CISSP in the UK excluding London over the 6 months to 9 December 2019.

Salary histogram for CISSP in the UK excluding London

CISSP
Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CISSP within the UK excluding London region over the 6 months to 9 December 2019. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
South East -17 359 £65,000 +8.33% 39
Midlands +84 279 £52,945 -7.92% 36
West Midlands +71 232 £52,945 -7.92% 32
North of England -95 185 £55,000 - 22
South West -14 125 £55,000 - 17
North West -124 101 £55,000 - 17
East of England -81 77 £60,000 -7.69% 14
Yorkshire +7 70 £58,500 +11.43% 5
Scotland +27 58 £58,500 +11.43% 6
Wales +36 49 £52,500 +26.19% 2
East Midlands +29 46 £55,000 -8.33% 3
North East +11 12 £54,500 -5.22%
Northern Ireland +6 7 £55,000 -12.00%
CISSP
UK

For the 6 months to 9 December 2019, IT jobs citing CISSP also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads across the UK excluding London region with a requirement for CISSP.

1 779 (68.39%) Information Security
2 673 (59.09%) CISM
3 578 (50.75%) Cybersecurity
4 493 (43.28%) ISO/IEC 27001
5 311 (27.30%) Degree
6 304 (26.69%) Finance
7 278 (24.41%) Management Information System
8 256 (22.48%) CISA
9 248 (21.77%) SIEM
10 233 (20.46%) Firewall
11 213 (18.70%) ITIL
11 213 (18.70%) NIST
12 211 (18.53%) Risk Management
13 202 (17.73%) Security Operations
14 195 (17.12%) Security Architecture
15 177 (15.54%) PCI DSS
16 166 (14.57%) Network Security
17 161 (14.14%) Agile Software Development
17 161 (14.14%) GDPR
18 160 (14.05%) AWS
19 155 (13.61%) Penetration Testing
20 154 (13.52%) Security Management
21 148 (12.99%) Cisco Certification
22 146 (12.82%) CEH
23 142 (12.47%) Security Cleared
24 137 (12.03%) Azure
25 134 (11.76%) GIAC
26 128 (11.24%) Windows
27 125 (10.97%) Vulnerability Management
28 124 (10.89%) TOGAF

CISSP
Co-occurring IT Skills in the UK excluding London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 53 (4.65%) IIS
2 19 (1.67%) Apache Spark
3 18 (1.58%) Elasticsearch
3 18 (1.58%) OpenStack
4 4 (0.35%) SharePoint
4 4 (0.35%) Skype for Business
5 3 (0.26%) Apache
5 3 (0.26%) Tomcat
6 1 (0.088%) MS Exchange
Applications
1 26 (2.28%) Microsoft Excel
2 20 (1.76%) Microsoft PowerPoint
3 11 (0.97%) Microsoft Office
4 1 (0.088%) MS Visio
Business Applications
1 1 (0.088%) Dynamics CRM
1 1 (0.088%) Dynamics NAV
1 1 (0.088%) RESILIA
1 1 (0.088%) SAP GRC
1 1 (0.088%) SAP S/4HANA
Cloud Services
1 160 (14.05%) AWS
2 137 (12.03%) Azure
3 56 (4.92%) GCP
4 45 (3.95%) Office 365
5 29 (2.55%) Cloud Computing
6 26 (2.28%) SaaS
7 24 (2.11%) PaaS
8 22 (1.93%) IaaS
9 18 (1.58%) OpenShift
10 10 (0.88%) Azure Active Directory
11 6 (0.53%) Serverless
12 5 (0.44%) Amazon EC2
12 5 (0.44%) AWS CloudTrail
12 5 (0.44%) Virtual Private Cloud
13 3 (0.26%) Power Platform
14 2 (0.18%) Microsoft Flow
15 1 (0.088%) Dynamics 365
15 1 (0.088%) G Suite
15 1 (0.088%) Mimecast
Communications & Networking
1 233 (20.46%) Firewall
2 166 (14.57%) Network Security
3 74 (6.50%) TCP/IP
4 52 (4.57%) Internet
5 42 (3.69%) VPN
6 41 (3.60%) Intrusion Detection
7 34 (2.99%) WAN
8 31 (2.72%) LAN
9 25 (2.19%) DNS
9 25 (2.19%) SSL
10 21 (1.84%) HTTPS
11 18 (1.58%) IPsec
12 15 (1.32%) BGP
12 15 (1.32%) EIGRP
12 15 (1.32%) IPv4
12 15 (1.32%) IPv6
12 15 (1.32%) OSPF
12 15 (1.32%) RIP
13 12 (1.05%) Wireless
14 9 (0.79%) HTTP
Database & Business Intelligence
1 29 (2.55%) Big Data
2 4 (0.35%) Geospatial Data
2 4 (0.35%) GIS
2 4 (0.35%) Maltego
2 4 (0.35%) Relational Database
3 3 (0.26%) SQL Server
4 2 (0.18%) Power BI
5 1 (0.088%) Apache Hive
5 1 (0.088%) Impala
Development Applications
1 22 (1.93%) Git (software)
2 20 (1.76%) JIRA
3 19 (1.67%) Bitbucket
3 19 (1.67%) git-flow
4 8 (0.70%) Metasploit
5 5 (0.44%) Burp Suite
6 3 (0.26%) Appium
6 3 (0.26%) Calabash
6 3 (0.26%) Cucumber
6 3 (0.26%) JMeter
6 3 (0.26%) Maven
6 3 (0.26%) monkeyrunner
6 3 (0.26%) Postman
6 3 (0.26%) Robot Framework
6 3 (0.26%) Robotium
6 3 (0.26%) Selenium
6 3 (0.26%) TestRail
7 2 (0.18%) REST Assured
8 1 (0.088%) Bitbucket Server
General
1 304 (26.69%) Finance
2 111 (9.75%) Retail
3 72 (6.32%) Public Sector
4 68 (5.97%) Legal
5 41 (3.60%) Banking
6 40 (3.51%) Law
7 39 (3.42%) Telecoms
8 23 (2.02%) Manufacturing
9 19 (1.67%) Aerospace
10 17 (1.49%) Games
10 17 (1.49%) Marketing
11 14 (1.23%) Electronics
12 10 (0.88%) Financial Institution
12 10 (0.88%) Military
13 5 (0.44%) Local Government
14 3 (0.26%) Advertising
15 2 (0.18%) Spanish Language
16 1 (0.088%) Automotive
16 1 (0.088%) French Language
16 1 (0.088%) German Language
Job Titles
1 201 (17.65%) Consultant
2 198 (17.38%) Analyst
3 163 (14.31%) Security Consultant
4 162 (14.22%) Security Manager
5 152 (13.35%) Security Analyst
6 115 (10.10%) Architect
6 115 (10.10%) Security Engineer
7 114 (10.01%) Security Architect
8 99 (8.69%) Information Manager
9 98 (8.60%) Information Security Manager
10 92 (8.08%) Information Analyst
10 92 (8.08%) Information Security Analyst
11 80 (7.02%) Security Specialist
12 65 (5.71%) Information Security Consultant
13 50 (4.39%) Security Officer
14 42 (3.69%) Cybersecurity Consultant
15 41 (3.60%) Information Security Officer
16 40 (3.51%) Cybersecurity Specialist
17 37 (3.25%) Information Officer
18 36 (3.16%) Senior Analyst
Libraries, Frameworks & Software Standards
1 33 (2.90%) .NET
2 25 (2.19%) Spring
3 20 (1.76%) REST
4 19 (1.67%) Kafka
5 18 (1.58%) AngularJS
5 18 (1.58%) ASP.NET
5 18 (1.58%) GraphQL
5 18 (1.58%) Node.js
5 18 (1.58%) React
5 18 (1.58%) Spring MVC
5 18 (1.58%) Vue.js
6 16 (1.40%) Web Services
7 8 (0.70%) LDAP
8 7 (0.61%) Apache Camel
8 7 (0.61%) Hibernate
8 7 (0.61%) OAuth
8 7 (0.61%) OAuth2
8 7 (0.61%) Regular Expression
9 6 (0.53%) SailPoint
10 5 (0.44%) ModSecurity
Miscellaneous
1 278 (24.41%) Management Information System
2 67 (5.88%) Analytical Skills
3 52 (4.57%) Security Operations Centre
4 47 (4.13%) Cyberattack
5 43 (3.78%) Cyberthreat
6 41 (3.60%) Self-Motivation
7 37 (3.25%) PKI
8 35 (3.07%) Data Protection Act
9 31 (2.72%) Data Centre
10 25 (2.19%) CESG
11 17 (1.49%) Greenfield Project
12 14 (1.23%) Cyber Defence
12 14 (1.23%) Cyber Kill Chain
13 12 (1.05%) Distributed Denial-of-Service
14 11 (0.97%) User Experience
15 10 (0.88%) Enterprise Cloud
15 10 (0.88%) Mobile Computing
15 10 (0.88%) SWIFT
16 9 (0.79%) Cybercrime
16 9 (0.79%) Enterprise Software
Operating Systems
1 128 (11.24%) Windows
2 120 (10.54%) Linux
3 31 (2.72%) Apple iOS
3 31 (2.72%) Unix
4 29 (2.55%) Android
5 20 (1.76%) Windows Server
6 6 (0.53%) Windows 10
7 4 (0.35%) Kali Linux
7 4 (0.35%) Mac OS
8 3 (0.26%) Solaris
8 3 (0.26%) Windows Server 2012
9 1 (0.088%) Windows Server 2008
Processes & Methodologies
1 779 (68.39%) Information Security
2 578 (50.75%) Cybersecurity
3 248 (21.77%) SIEM
4 213 (18.70%) ITIL
5 211 (18.53%) Risk Management
6 202 (17.73%) Security Operations
7 195 (17.12%) Security Architecture
8 161 (14.14%) Agile Software Development
9 155 (13.61%) Penetration Testing
10 154 (13.52%) Security Management
11 125 (10.97%) Vulnerability Management
12 124 (10.89%) TOGAF
13 113 (9.92%) ISMS
14 109 (9.57%) Threat Intelligence
15 108 (9.48%) Continuous Improvement
16 101 (8.87%) Information Assurance
17 100 (8.78%) Data Protection
18 97 (8.52%) Incident Management
19 96 (8.43%) Identity Access Management
19 96 (8.43%) SABSA
Programming Languages
1 45 (3.95%) C
2 37 (3.25%) Java
3 29 (2.55%) SQL
4 22 (1.93%) Python
5 19 (1.67%) PowerShell
6 18 (1.58%) C++
7 12 (1.05%) C#
7 12 (1.05%) RPG
7 12 (1.05%) VB.NET
8 10 (0.88%) Shell Script
9 9 (0.79%) JavaScript
10 7 (0.61%) Perl
11 6 (0.53%) PHP
12 5 (0.44%) TypeScript
13 3 (0.26%) Bash Shell
14 2 (0.18%) Scala
15 1 (0.088%) Objective-C
15 1 (0.088%) R
Qualifications
1 673 (59.09%) CISM
2 311 (27.30%) Degree
3 256 (22.48%) CISA
4 148 (12.99%) Cisco Certification
5 146 (12.82%) CEH
6 142 (12.47%) Security Cleared
7 134 (11.76%) GIAC
8 116 (10.18%) CRISC
9 100 (8.78%) CESG Certified Professional
10 86 (7.55%) SC Cleared
11 81 (7.11%) SSCP
12 66 (5.79%) CompTIA Security+
13 61 (5.36%) CISMP
14 60 (5.27%) CCNA
15 58 (5.09%) SANS
16 49 (4.30%) (ISC)2 CCSP
16 49 (4.30%) IISP
17 46 (4.04%) CREST Certified
18 45 (3.95%) CCSP
18 45 (3.95%) Computer Science Degree
Quality Assurance & Compliance
1 493 (43.28%) ISO/IEC 27001
2 213 (18.70%) NIST
3 177 (15.54%) PCI DSS
4 161 (14.14%) GDPR
5 80 (7.02%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
6 74 (6.50%) COBIT
7 72 (6.32%) Cyber Essentials
8 66 (5.79%) NCSC
9 53 (4.65%) HMG Security Policy Framework
10 27 (2.37%) RMADS
10 27 (2.37%) SLA
11 23 (2.02%) Sarbanes-Oxley
12 21 (1.84%) NIST 800
13 17 (1.49%) ISO 9001
13 17 (1.49%) JSP 440
14 15 (1.32%) ISO 22301
14 15 (1.32%) QA
15 10 (0.88%) ISO/IEC 27005
16 8 (0.70%) PMO
17 7 (0.61%) Cyber Essentials PLUS
System Software
1 48 (4.21%) Active Directory
2 18 (1.58%) Docker
3 12 (1.05%) VMware Infrastructure
4 5 (0.44%) Virtual Machines
5 4 (0.35%) BitLocker
5 4 (0.35%) Hyper-V
6 1 (0.088%) ACF2
6 1 (0.088%) Apache Flume
6 1 (0.088%) Shibboleth
6 1 (0.088%) VMware ESXi
Systems Management
1 33 (2.90%) Nessus
2 18 (1.58%) Kubernetes
3 16 (1.40%) QRadar
4 15 (1.32%) Norton AntiVirus
5 13 (1.14%) CASB
6 12 (1.05%) Nmap
7 11 (0.97%) Single Sign-On
8 9 (0.79%) CSIRT
9 6 (0.53%) OpenVAS
10 4 (0.35%) FortiGate
10 4 (0.35%) SCCM
11 3 (0.26%) Oracle Identity Management
12 2 (0.18%) Computer Emergency Response Teams
12 2 (0.18%) SCVMM
12 2 (0.18%) Stealthwatch
13 1 (0.088%) Ansible
13 1 (0.088%) Oozie
13 1 (0.088%) Puppet
13 1 (0.088%) Terraform
13 1 (0.088%) vCenter Server
Vendors
1 98 (8.60%) Cisco
2 83 (7.29%) Microsoft
3 54 (4.74%) Splunk
4 52 (4.57%) Google
5 46 (4.04%) Palo Alto
6 32 (2.81%) CheckPoint
7 31 (2.72%) Juniper
8 30 (2.63%) Qualys
9 25 (2.19%) ArcSight
10 22 (1.93%) Blue Coat
11 20 (1.76%) Oracle
11 20 (1.76%) VMware
12 19 (1.67%) Symantec
13 18 (1.58%) SAP
14 17 (1.49%) McAfee
15 16 (1.40%) Apple
16 14 (1.23%) CyberArk
16 14 (1.23%) Darktrace
17 13 (1.14%) F5
18 12 (1.05%) Intel