Period
to 23 September 2018

The following table provides summary statistics for permanent job vacancies advertised in the UK excluding London with a requirement for Information Security skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Information Security over the 6 months to 23 September 2018 with a comparison to the same period in the previous 2 years.

Information Security (InfoSec)
UK > UK excluding London
6 months to
23 Sep 2018
Same period 2017 Same period 2016
Rank 96 145 118
Rank change year-on-year +49 -27 +31
Permanent jobs citing Information Security 2,866 2,384 3,072
As % of all permanent IT jobs advertised in the UK excluding London 3.08% 2.45% 2.76%
As % of the Processes & Methodologies category 3.39% 2.70% 3.07%
Number of salaries quoted 2,088 1,738 2,311
UK excluding London median annual salary £54,000 £50,000 £52,500
Median salary % change year-on-year +8.00% -4.76% +5.00%
10th Percentile £31,925 £32,303 £32,500
90th Percentile £77,500 £75,000 £76,000
UK median annual salary £60,000 £60,000 £60,000

Information Security is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies advertised in the UK excluding London with a requirement for process or methodology skills.

All Process and Methodology Skills
UK excluding London
Permanent vacancies with a requirement for process or methodology skills 84,464 88,333 100,205
As % of all permanent IT jobs advertised in the UK excluding London 90.69% 90.70% 90.02%
Number of salaries quoted 67,287 71,666 81,788
UK excluding London median annual salary £45,000 £42,500 £42,500
Median salary % change year-on-year +5.88% - -
10th Percentile £26,750 £26,250 £26,250
90th Percentile £68,750 £65,000 £65,000
UK median annual salary £50,000 £50,000 £48,000
% change year-on-year - +4.17% +1.05%

Information Security
Job Vacancy Trend in the UK excluding London

Job postings citing Information Security as a percentage of all IT jobs advertised in the UK excluding London.

Job vacancy trend for Information Security in the UK excluding London

Information Security
Salary Trend in the UK excluding London

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing Information Security in the UK excluding London.

Salary trend for Information Security in the UK excluding London

Information Security
Salary Histogram in the UK excluding London

The salary distribution of IT jobs citing Information Security in the UK excluding London over the 6 months to 23 September 2018.

Salary histogram for Information Security in the UK excluding London

Information Security
Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Information Security within the UK excluding London region over the 6 months to 23 September 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
South East +16 827 £60,000 +14.29% 107
North of England +35 821 £50,000 +5.26% 83
North West +31 497 £55,000 +4.76% 53
East of England +84 413 £52,500 -4.55% 51
Midlands +59 405 £52,500 +5.00% 63
Yorkshire +40 296 £45,000 - 29
West Midlands +42 295 £50,000 -4.76% 46
South West +15 243 £50,500 +1.00% 54
East Midlands +41 103 £58,750 +23.68% 17
Scotland +3 101 £45,625 -8.75% 19
Wales +10 47 £40,210 -5.39% 8
North East -20 28 £58,750 +23.68% 1
Northern Ireland +2 7 £45,000 +12.50% 1
Isle of Man +4 5 £55,000 +120.00%
Information Security
UK

For the 6 months to 23 September 2018, IT jobs citing Information Security also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads across the UK excluding London region with a requirement for Information Security.

1 1,150 (40.13%) ISO/IEC 27001
2 1,027 (35.83%) CISSP
3 777 (27.11%) Cybersecurity
4 730 (25.47%) Management Information System
5 627 (21.88%) Risk Management
6 603 (21.04%) CISM
7 585 (20.41%) Finance
8 565 (19.71%) SIEM
9 543 (18.95%) GDPR
10 518 (18.07%) Degree
11 508 (17.73%) PCI DSS
12 466 (16.26%) Firewall
13 457 (15.95%) ITIL
14 447 (15.60%) Microsoft
15 440 (15.35%) Windows
16 420 (14.65%) Data Protection
17 359 (12.53%) Network Security
18 357 (12.46%) Security Management
19 340 (11.86%) Agile Software Development
19 340 (11.86%) Security Operations
20 335 (11.69%) Linux
21 329 (11.48%) CISA
22 321 (11.20%) Analytical Skills
23 318 (11.10%) Continuous Improvement
24 311 (10.85%) Security Architecture
25 304 (10.61%) Problem-Solving
26 297 (10.36%) Vulnerability Management
27 290 (10.12%) Penetration Testing
28 273 (9.53%) Incident Management
29 264 (9.21%) Legal

Information Security
Co-occurring IT Skills in the UK excluding London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 47 (1.64%) SharePoint
2 31 (1.08%) IIS
3 26 (0.91%) MS Exchange
4 24 (0.84%) Apache
4 24 (0.84%) CMS
5 13 (0.45%) Confluence
6 12 (0.42%) OpenStack
7 10 (0.35%) Sitefinity
8 9 (0.31%) nginx
9 5 (0.17%) SAS
10 4 (0.14%) Apache Spark
10 4 (0.14%) Exchange Server 2003
11 3 (0.10%) Exchange Server 2010
11 3 (0.10%) IBM Domino
11 3 (0.10%) lighttpd
11 3 (0.10%) Oracle SOA Suite
11 3 (0.10%) SharePoint 2013
11 3 (0.10%) SharePoint Server
11 3 (0.10%) Skype for Business
11 3 (0.10%) WebSphere
Applications
1 117 (4.08%) Microsoft Office
2 49 (1.71%) Microsoft PowerPoint
3 36 (1.26%) Microsoft Excel
4 13 (0.45%) MS Visio
5 6 (0.21%) Microsoft Project
6 5 (0.17%) SOLIDWORKS
7 3 (0.10%) Spreadsheet
8 1 (0.035%) Abaqus
8 1 (0.035%) Acrobat
8 1 (0.035%) Mathcad
Business Applications
1 13 (0.45%) Dynamics CRM
2 9 (0.31%) assyst
3 7 (0.24%) Sentinel
4 6 (0.21%) Salesforce.com CRM
5 5 (0.17%) Elite 3E
5 5 (0.17%) SAP CO
5 5 (0.17%) SAP FI
5 5 (0.17%) SAP FI/CO
5 5 (0.17%) SAP MM
5 5 (0.17%) SAP R/3
5 5 (0.17%) SAP S/4HANA
5 5 (0.17%) SAP SD
6 4 (0.14%) Relativity
7 3 (0.10%) Dynamics AX
7 3 (0.10%) Infor M3
7 3 (0.10%) SAP CRM
7 3 (0.10%) SAP ERP
8 2 (0.070%) Dynamics NAV
8 2 (0.070%) Remedy ITSM
8 2 (0.070%) SAP GRC
Cloud Services
1 258 (9.00%) Microsoft Azure
2 188 (6.56%) Amazon AWS
3 130 (4.54%) SaaS
4 93 (3.24%) IaaS
5 84 (2.93%) PaaS
6 68 (2.37%) Office 365
7 20 (0.70%) Cloud Computing
8 16 (0.56%) GitHub
8 16 (0.56%) Google Cloud Platform
9 11 (0.38%) IBM Cloud
9 11 (0.38%) Virtual Private Cloud
10 10 (0.35%) Dynamics 365
11 6 (0.21%) Amazon S3
11 6 (0.21%) AWS CloudFormation
11 6 (0.21%) Azure Active Directory
11 6 (0.21%) Salesforce Service Cloud
12 4 (0.14%) Amazon EC2
12 4 (0.14%) OneDrive
13 2 (0.070%) Amazon SQS
13 2 (0.070%) AWS Elastic Beanstalk
Communications & Networking
1 466 (16.26%) Firewall
2 359 (12.53%) Network Security
3 177 (6.18%) Intrusion Detection
4 135 (4.71%) TCP/IP
5 134 (4.68%) VPN
6 133 (4.64%) LAN
7 124 (4.33%) WAN
8 98 (3.42%) DNS
9 90 (3.14%) Internet
10 77 (2.69%) Wi-Fi
11 67 (2.34%) Wireshark
12 58 (2.02%) SAN
13 44 (1.54%) DHCP
14 43 (1.50%) Wireless
14 43 (1.50%) WLAN
15 39 (1.36%) HTTP
16 27 (0.94%) Cisco ASA
16 27 (0.94%) IPsec
17 26 (0.91%) Ethernet
18 25 (0.87%) OSPF
Database & Business Intelligence
1 93 (3.24%) SQL Server
2 89 (3.11%) Big Data
3 30 (1.05%) MySQL
3 30 (1.05%) Relational Database
4 26 (0.91%) Hadoop
5 20 (0.70%) NoSQL
6 19 (0.66%) Oracle Exadata
6 19 (0.66%) SAP HANA
6 19 (0.66%) SQL Server Reporting Services
7 15 (0.52%) PostgreSQL
8 14 (0.49%) RDBMS
8 14 (0.49%) SQL Server Integration Services
9 13 (0.45%) GIS
10 11 (0.38%) SQL Server 2008
11 10 (0.35%) Data Warehouse
12 9 (0.31%) MS Access
13 8 (0.28%) DB2
14 7 (0.24%) Geospatial Data
14 7 (0.24%) MongoDB
15 5 (0.17%) Oracle Database
Development Applications
1 34 (1.19%) JIRA
2 31 (1.08%) Jenkins
3 23 (0.80%) Git (software)
4 19 (0.66%) Team Foundation Server
5 17 (0.59%) Burp Suite
6 15 (0.52%) Selenium
7 11 (0.38%) Cucumber
7 11 (0.38%) Octopus Deploy
8 10 (0.35%) Metasploit
9 9 (0.31%) MSBuild
10 8 (0.28%) Visual Studio
10 8 (0.28%) Visual Studio Team System
11 6 (0.21%) Ant
11 6 (0.21%) Subversion
11 6 (0.21%) TeamCity
12 5 (0.17%) AppScan
12 5 (0.17%) SonarQube
13 4 (0.14%) Bitbucket
13 4 (0.14%) Rational DOORS
14 3 (0.10%) Maven
General
1 585 (20.41%) Finance
2 264 (9.21%) Legal
3 212 (7.40%) Retail
4 93 (3.24%) Telecoms
5 83 (2.90%) Banking
6 64 (2.23%) Military
7 58 (2.02%) Electronics
8 55 (1.92%) Marketing
9 54 (1.88%) Law
10 38 (1.33%) Manufacturing
11 29 (1.01%) Publishing
12 20 (0.70%) Investment Banking
13 19 (0.66%) Back Office
14 18 (0.63%) Games
15 12 (0.42%) Pharmaceutical
16 10 (0.35%) Billing
16 10 (0.35%) Retail Banking
17 9 (0.31%) Aerospace
17 9 (0.31%) Local Government
18 8 (0.28%) Advertising
Job Titles
1 720 (25.12%) Analyst
2 522 (18.21%) Security Analyst
3 447 (15.60%) Security Manager
4 341 (11.90%) Information Manager
5 326 (11.37%) Information Security Manager
6 277 (9.67%) Architect
7 254 (8.86%) Information Analyst
8 250 (8.72%) Information Security Analyst
9 195 (6.80%) Consultant
10 189 (6.59%) Security Engineer
11 167 (5.83%) Security Architect
12 154 (5.37%) IT Analyst
13 151 (5.27%) Security Consultant
14 144 (5.02%) Security Officer
15 130 (4.54%) Senior Analyst
16 123 (4.29%) IT Security Analyst
17 122 (4.26%) IT Manager
18 115 (4.01%) Information Security Officer
19 110 (3.84%) Senior Security Analyst
20 103 (3.59%) Information Officer
Libraries, Frameworks & Software Standards
1 95 (3.31%) .NET
2 47 (1.64%) .NET Framework
3 45 (1.57%) HTML
4 37 (1.29%) Middleware
5 36 (1.26%) J2EE
6 34 (1.19%) Web Services
7 30 (1.05%) REST
8 27 (0.94%) SailPoint
9 20 (0.70%) Node.js
10 18 (0.63%) OAuth
11 17 (0.59%) LAMP
12 16 (0.56%) ASP.NET Web API
12 16 (0.56%) RESTful
12 16 (0.56%) XML
13 15 (0.52%) AngularJS
13 15 (0.52%) CSS
13 15 (0.52%) jQuery
14 14 (0.49%) ASP.NET
14 14 (0.49%) SAML
15 12 (0.42%) HTML5
Miscellaneous
1 730 (25.47%) Management Information System
2 321 (11.20%) Analytical Skills
3 212 (7.40%) Self-Motivation
4 204 (7.12%) Data Centre
5 180 (6.28%) Computer Science
6 115 (4.01%) Security Operations Centre
7 110 (3.84%) Cyberthreat
8 96 (3.35%) Cyber Kill Chain
9 88 (3.07%) Data Protection Act
10 73 (2.55%) PKI
11 67 (2.34%) CESG
12 56 (1.95%) Distributed Denial-of-Service
13 47 (1.64%) Mobile App
14 43 (1.50%) Enterprise Software
15 39 (1.36%) Cyberattack
16 34 (1.19%) Hybrid Cloud
17 31 (1.08%) NHS
18 30 (1.05%) Public Cloud
19 26 (0.91%) Freedom of Information
20 25 (0.87%) User Experience
Operating Systems
1 440 (15.35%) Windows
2 335 (11.69%) Linux
3 96 (3.35%) Unix
4 80 (2.79%) Windows Server
5 38 (1.33%) Android
6 32 (1.12%) Windows 10
7 30 (1.05%) Windows 7
8 26 (0.91%) Apple iOS
8 26 (0.91%) Mac OS X
9 25 (0.87%) Solaris
9 25 (0.87%) Windows Server 2012
10 18 (0.63%) Red Hat Enterprise Linux
11 17 (0.59%) Windows 8
11 17 (0.59%) Windows Server 2008
12 10 (0.35%) CentOS
13 9 (0.31%) Kali Linux
14 8 (0.28%) AIX
15 5 (0.17%) Windows XP
16 4 (0.14%) Data ONTAP
17 3 (0.10%) Windows 2000
Processes & Methodologies
1 777 (27.11%) Cybersecurity
2 627 (21.88%) Risk Management
3 565 (19.71%) SIEM
4 457 (15.95%) ITIL
5 420 (14.65%) Data Protection
6 357 (12.46%) Security Management
7 340 (11.86%) Agile Software Development
7 340 (11.86%) Security Operations
8 318 (11.10%) Continuous Improvement
9 311 (10.85%) Security Architecture
10 304 (10.61%) Problem-Solving
11 297 (10.36%) Vulnerability Management
12 290 (10.12%) Penetration Testing
13 273 (9.53%) Incident Management
14 237 (8.27%) Information Security Management
15 235 (8.20%) Business Continuity
16 230 (8.03%) Project Management
17 222 (7.75%) Stakeholder Management
18 218 (7.61%) Disaster Recovery
18 218 (7.61%) ISMS
Programming Languages
1 170 (5.93%) SQL
2 126 (4.40%) Java
3 119 (4.15%) Python
4 70 (2.44%) C
5 68 (2.37%) Perl
6 63 (2.20%) PowerShell
7 62 (2.16%) C#
8 44 (1.54%) C++
9 43 (1.50%) JavaScript
10 31 (1.08%) PHP
11 25 (0.87%) T-SQL
12 24 (0.84%) Ruby
13 16 (0.56%) Bash Shell
14 15 (0.52%) Shell Script
14 15 (0.52%) VB
15 14 (0.49%) VB.NET
16 12 (0.42%) VBA
17 6 (0.21%) Apex Code
17 6 (0.21%) JCL
17 6 (0.21%) REXX
Qualifications
1 1,027 (35.83%) CISSP
2 603 (21.04%) CISM
3 518 (18.07%) Degree
4 329 (11.48%) CISA
5 260 (9.07%) Security Cleared
6 259 (9.04%) Cisco Certification
7 194 (6.77%) CEH
8 160 (5.58%) SSCP
9 159 (5.55%) SANS
10 115 (4.01%) (ISC)2 CCSP
10 115 (4.01%) CCNP
11 112 (3.91%) SC Cleared
12 110 (3.84%) Computer Science Degree
13 88 (3.07%) Microsoft Certification
14 87 (3.04%) CCNA
15 84 (2.93%) CREST Certified
16 80 (2.79%) GIAC
17 77 (2.69%) CRISC
18 74 (2.58%) MCSE
19 73 (2.55%) CCSP
Quality Assurance & Compliance
1 1,150 (40.13%) ISO/IEC 27001
2 543 (18.95%) GDPR
3 508 (17.73%) PCI DSS
4 188 (6.56%) Cyber Essentials
5 135 (4.71%) COBIT
6 115 (4.01%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 74 (2.58%) SLA
8 63 (2.20%) ISO 9001
9 54 (1.88%) Sarbanes-Oxley
10 42 (1.47%) Cyber Essentials PLUS
11 41 (1.43%) ISO 22301
12 36 (1.26%) QA
13 24 (0.84%) PMO
14 22 (0.77%) GPG13
15 21 (0.73%) HIPAA
15 21 (0.73%) HMG Security Policy Framework
16 19 (0.66%) ISO/IEC 20000
17 18 (0.63%) ISO/IEC 27005
18 17 (0.59%) FISMA
19 14 (0.49%) PSD2
System Software
1 172 (6.00%) Active Directory
2 145 (5.06%) VMware Infrastructure
3 36 (1.26%) Hyper-V
4 31 (1.08%) Docker
5 19 (0.66%) Virtual Desktop
6 15 (0.52%) Firmware
6 15 (0.52%) VMware ESXi
6 15 (0.52%) vSphere
7 13 (0.45%) Snort
7 13 (0.45%) Virtual Machines
8 7 (0.24%) RACF
9 4 (0.14%) GlusterFS
9 4 (0.14%) Veritas Cluster Server
10 3 (0.10%) KVM
10 3 (0.10%) Oracle RAC
10 3 (0.10%) Terminal Services
10 3 (0.10%) Tivoli Directory Server
11 2 (0.070%) Apache Flume
11 2 (0.070%) HDFS
11 2 (0.070%) XenApp
Systems Management
1 51 (1.78%) RSA Security Analytics
2 49 (1.71%) Nessus
3 32 (1.12%) SCCM
4 30 (1.05%) QRadar
5 26 (0.91%) Stealthwatch
6 24 (0.84%) Opscode Chef
7 23 (0.80%) OpenVAS
8 20 (0.70%) Core Impact
8 20 (0.70%) Nexpose
9 19 (0.66%) Puppet
10 18 (0.63%) McAfee ePO
11 17 (0.59%) Ansible
12 16 (0.56%) Single Sign-On
13 14 (0.49%) FortiGate
13 14 (0.49%) Norton AntiVirus
13 14 (0.49%) Terraform
14 12 (0.42%) vCenter Server
15 11 (0.38%) Kubernetes
15 11 (0.38%) Microsoft Clustering
16 10 (0.35%) OSSEC
Vendors
1 447 (15.60%) Microsoft
2 247 (8.62%) Cisco
3 221 (7.71%) VMware
4 138 (4.82%) Splunk
5 131 (4.57%) CheckPoint
6 99 (3.45%) Symantec
7 85 (2.97%) Oracle
8 72 (2.51%) LogRhythm
9 69 (2.41%) Qualys
10 62 (2.16%) SAP
11 61 (2.13%) Citrix
12 50 (1.74%) McAfee
13 49 (1.71%) Juniper
14 47 (1.64%) Forcepoint
14 47 (1.64%) Red Hat
15 44 (1.54%) ArcSight
16 43 (1.50%) SolarWinds
17 39 (1.36%) Fortinet
18 38 (1.33%) CyberArk
19 35 (1.22%) EMC