Period
to 27 January 2022

The following table provides summary statistics for permanent job vacancies with a requirement for CISA qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 27 January 2022 with a comparison to the same period in the previous 2 years.

ISACA Certified Information Systems Auditor (CISA)
UK
6 months to
27 Jan 2022
Same period 2021 Same period 2020
Rank 695 561 578
Rank change year-on-year -134 +17 -38
Permanent jobs citing CISA 413 233 540
As % of all permanent jobs advertised in the UK 0.32% 0.36% 0.43%
As % of the Qualifications category 1.35% 1.78% 1.98%
Number of salaries quoted 274 185 445
10th Percentile £43,075 £45,800 £40,250
25th Percentile £55,000 £52,000 £51,250
Median annual salary (50th Percentile) £65,000 £65,000 £63,500
Median % change year-on-year - +2.36% -2.31%
75th Percentile £82,500 £81,250 £78,500
90th Percentile £99,250 £92,500 £95,000
UK excluding London median annual salary £60,000 £60,000 £57,500
% change year-on-year - +4.35% -4.17%

CISA is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK
Permanent vacancies requiring academic qualifications or professional certifications 30,695 13,087 27,282
As % of all permanent IT jobs advertised in the UK 23.54% 20.23% 21.84%
Number of salaries quoted 15,568 9,600 20,595
10th Percentile £31,000 £31,250 £27,500
25th Percentile £41,250 £41,250 £36,250
Median annual salary (50th Percentile) £55,000 £55,000 £50,000
Median % change year-on-year - +10.00% -
75th Percentile £73,750 £71,250 £67,500
90th Percentile £90,000 £85,000 £82,500
UK excluding London median annual salary £50,000 £49,773 £45,000
% change year-on-year +0.46% +10.61% -

CISA
Job Vacancy Trend

Job postings citing CISA as a proportion of all IT jobs advertised.

Job vacancy trend for CISA in the UK

CISA
Salary Trend

3-month moving average salary quoted in jobs citing CISA.

Salary trend for CISA in the UK

CISA
Salary Histogram

Salary distribution for jobs citing CISA over the 6 months to 27 January 2022.

Salary histogram for CISA in the UK

CISA
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CISA within the UK over the 6 months to 27 January 2022. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England -149 327 £65,000 - 65
London -159 188 £70,000 - 32
UK excluding London -156 149 £60,000 - 34
Work from Home -131 106 £75,000 +9.09% 10
South East -81 66 £60,000 - 6
Midlands -99 21 £67,500 -3.57% 6
Scotland -46 20 £46,000 -3.97% 3
West Midlands -67 20 £67,500 +8.00% 3
North of England -118 20 £56,250 +2.27% 16
Yorkshire -72 12 £57,500 +4.55% 7
South West -49 10 £60,000 -7.69% 1
North West -109 8 £55,000 - 7
East of England -95 7 £75,000 +3.45% 2
Northern Ireland -31 6 £37,500 -21.05%
Wales -44 1 £47,500 -24.00%
East Midlands -61 1 £57,500 -17.86% 3

For the 6 months to 27 January 2022, IT jobs citing CISA also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for CISA.

1 367 (88.86%) CISSP
2 324 (78.45%) CISM
3 284 (68.77%) Information Security
4 244 (59.08%) Cybersecurity
5 198 (47.94%) ISO/IEC 27001
6 179 (43.34%) Finance
7 160 (38.74%) Risk Management
8 134 (32.45%) Management Information System
9 133 (32.20%) CRISC
10 129 (31.23%) Social Skills
11 120 (29.06%) NIST
12 118 (28.57%) Degree
13 105 (25.42%) ITIL
14 86 (20.82%) GDPR
15 82 (19.85%) Data Protection
16 81 (19.61%) Internal Audit
16 81 (19.61%) Penetration Testing
17 80 (19.37%) Security Management
18 72 (17.43%) IT Audit
19 71 (17.19%) Analytical Skills
20 64 (15.50%) COBIT
21 63 (15.25%) Agile Software Development
21 63 (15.25%) PCI DSS
22 60 (14.53%) Business Continuity
23 57 (13.80%) Azure
24 56 (13.56%) Continuous Improvement
25 55 (13.32%) Risk Analysis
25 55 (13.32%) Data Privacy
26 54 (13.08%) Risk Assessment
27 53 (12.83%) ISMS

CISA
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 8 (1.94%) IIS
2 3 (0.73%) SharePoint
3 1 (0.24%) Apache Spark
3 1 (0.24%) SAS
Applications
1 5 (1.21%) Microsoft PowerPoint
2 3 (0.73%) Microsoft Office
3 2 (0.48%) Microsoft Excel
4 1 (0.24%) MS Visio
Business Applications
1 7 (1.69%) SAP GRC
2 4 (0.97%) SAP BPC
2 4 (0.97%) SAP CO
2 4 (0.97%) SAP FI
2 4 (0.97%) SAP FI/CO
2 4 (0.97%) SAP S/4HANA
3 3 (0.73%) NetSuite
3 3 (0.73%) SAP ERP
4 2 (0.48%) Oracle EBS
4 2 (0.48%) Oracle ERP
5 1 (0.24%) Unit4 Business World
Cloud Services
1 57 (13.80%) Azure
2 50 (12.11%) AWS
3 10 (2.42%) GCP
4 9 (2.18%) SaaS
5 7 (1.69%) Azure Sentinel
6 6 (1.45%) Power Platform
7 3 (0.73%) Azure Active Directory
7 3 (0.73%) Cloud Computing
7 3 (0.73%) PaaS
8 2 (0.48%) IaaS
8 2 (0.48%) Microsoft 365
8 2 (0.48%) Serverless
9 1 (0.24%) Akamai
9 1 (0.24%) Amazon GuardDuty
9 1 (0.24%) Azure Monitor
9 1 (0.24%) Azure Service Bus
9 1 (0.24%) Dynamics 365
9 1 (0.24%) GitHub
Communications & Networking
1 48 (11.62%) Firewall
2 26 (6.30%) Network Security
3 8 (1.94%) Intrusion Detection
4 7 (1.69%) DNS
5 6 (1.45%) VPN
6 5 (1.21%) Internet
6 5 (1.21%) Wireless
7 4 (0.97%) RTP
7 4 (0.97%) Wireless Security
8 2 (0.48%) GSM
8 2 (0.48%) Intranet
9 1 (0.24%) Broadband
9 1 (0.24%) Cisco IPT
9 1 (0.24%) HTTP
9 1 (0.24%) Reverse Proxy
9 1 (0.24%) SSL
9 1 (0.24%) TCP/IP
Database & Business Intelligence
1 11 (2.66%) Blockchain
2 6 (1.45%) Power BI
3 5 (1.21%) SQL Server
4 4 (0.97%) Relational Database
5 3 (0.73%) MySQL
5 3 (0.73%) Oracle Database
5 3 (0.73%) RDBMS
5 3 (0.73%) Tableau
6 1 (0.24%) Azure SQL Database
6 1 (0.24%) Data Warehouse
Development Applications
1 8 (1.94%) JIRA
1 8 (1.94%) Rational DOORS
1 8 (1.94%) SonarQube
1 8 (1.94%) Visual Studio
2 6 (1.45%) Burp Suite
3 3 (0.73%) SoapUI
4 1 (0.24%) AppScan
4 1 (0.24%) Eclipse
4 1 (0.24%) Jenkins
4 1 (0.24%) Sonatype Nexus
General
1 179 (43.34%) Finance
2 129 (31.23%) Social Skills
3 71 (17.19%) Analytical Skills
4 35 (8.47%) Inclusion and Diversity
4 35 (8.47%) Legal
5 20 (4.84%) Influencing Skills
5 20 (4.84%) Local Government
5 20 (4.84%) Telecoms
6 19 (4.60%) Presentation Skills
7 16 (3.87%) Retail
8 15 (3.63%) Law
9 10 (2.42%) Public Sector
10 9 (2.18%) Back Office
11 8 (1.94%) Banking
12 7 (1.69%) Marketing
13 6 (1.45%) Public Speaking
14 5 (1.21%) Documentation Skills
14 5 (1.21%) Manufacturing
14 5 (1.21%) Pharmaceutical
15 4 (0.97%) French Language
Job Titles
1 97 (23.49%) Security Manager
2 56 (13.56%) Analyst
3 47 (11.38%) Consultant
3 47 (11.38%) Security Analyst
4 46 (11.14%) Auditor
5 43 (10.41%) IT Auditor
6 36 (8.72%) Security Officer
7 35 (8.47%) Information Manager
7 35 (8.47%) Information Security Manager
7 35 (8.47%) IT Manager
8 34 (8.23%) Architect
8 34 (8.23%) Security Architect
9 31 (7.51%) Senior Manager
10 28 (6.78%) Security Consultant
11 24 (5.81%) Information Analyst
11 24 (5.81%) Information Security Analyst
12 22 (5.33%) Risk Manager
13 21 (5.08%) IT Analyst
13 21 (5.08%) IT Security Officer
14 20 (4.84%) IT Security Analyst
Libraries, Frameworks & Software Standards
1 7 (1.69%) SOAP
2 3 (0.73%) Middleware
2 3 (0.73%) REST
2 3 (0.73%) SailPoint
2 3 (0.73%) SAML
3 2 (0.48%) .NET
3 2 (0.48%) J2EE
3 2 (0.48%) OAuth
3 2 (0.48%) OpenID
4 1 (0.24%) .NET Framework
4 1 (0.24%) ASP.NET
4 1 (0.24%) JSP
4 1 (0.24%) RESTful
4 1 (0.24%) Web Services
4 1 (0.24%) XML
Miscellaneous
1 134 (32.45%) Management Information System
2 28 (6.78%) Self-Motivation
3 23 (5.57%) Public Cloud
4 22 (5.33%) Data Protection Act
5 18 (4.36%) Cyberthreat
6 10 (2.42%) Driving Licence
6 10 (2.42%) Robotics
6 10 (2.42%) Security Operations Centre
7 8 (1.94%) Data Centre
7 8 (1.94%) Freedom of Information
7 8 (1.94%) Freedom of Information Act
7 8 (1.94%) Mobile Payment
7 8 (1.94%) Smartcard
8 7 (1.69%) PKI
9 5 (1.21%) Linux Command Line
10 4 (0.97%) Clustering
10 4 (0.97%) Cyberattack
11 3 (0.73%) CCTV
11 3 (0.73%) FMCG
11 3 (0.73%) Social Media
Operating Systems
1 37 (8.96%) Windows
2 32 (7.75%) Linux
3 11 (2.66%) Solaris
4 8 (1.94%) Windows Server
5 7 (1.69%) Unix
6 6 (1.45%) Kali Linux
7 5 (1.21%) Mac OS
8 1 (0.24%) Android
8 1 (0.24%) Apple iOS
Processes & Methodologies
1 284 (68.77%) Information Security
2 244 (59.08%) Cybersecurity
3 160 (38.74%) Risk Management
4 105 (25.42%) ITIL
5 82 (19.85%) Data Protection
6 81 (19.61%) Internal Audit
6 81 (19.61%) Penetration Testing
7 80 (19.37%) Security Management
8 72 (17.43%) IT Audit
9 63 (15.25%) Agile Software Development
10 60 (14.53%) Business Continuity
11 56 (13.56%) Continuous Improvement
12 55 (13.32%) Data Privacy
12 55 (13.32%) Risk Analysis
13 54 (13.08%) Risk Assessment
14 53 (12.83%) ISMS
15 40 (9.69%) Service Management
16 38 (9.20%) Regulatory Compliance
17 35 (8.47%) Project Management
17 35 (8.47%) Vulnerability Management
Programming Languages
1 14 (3.39%) C#
1 14 (3.39%) Python
2 11 (2.66%) SQL
3 10 (2.42%) C
4 9 (2.18%) Java
5 6 (1.45%) PowerShell
6 2 (0.48%) Go
6 2 (0.48%) JavaScript
7 1 (0.24%) C++
7 1 (0.24%) PHP
Qualifications
1 367 (88.86%) CISSP
2 324 (78.45%) CISM
3 133 (32.20%) CRISC
4 118 (28.57%) Degree
5 45 (10.90%) Cisco Certification
5 45 (10.90%) Security Cleared
6 44 (10.65%) ISO 27001 Lead Auditor
7 39 (9.44%) (ISC)2 CCSP
8 38 (9.20%) CISMP
9 32 (7.75%) SC Cleared
10 28 (6.78%) CompTIA Security+
11 24 (5.81%) SSCP
12 23 (5.57%) CASP
12 23 (5.57%) CREST Certified
13 22 (5.33%) CCSP
14 18 (4.36%) CEH
15 14 (3.39%) GIAC
16 13 (3.15%) CGEIT
16 13 (3.15%) PCI QSA
17 12 (2.91%) ISACA
Quality Assurance & Compliance
1 198 (47.94%) ISO/IEC 27001
2 120 (29.06%) NIST
3 86 (20.82%) GDPR
4 64 (15.50%) COBIT
5 63 (15.25%) PCI DSS
6 48 (11.62%) GRC
6 48 (11.62%) ITGC
7 34 (8.23%) Sarbanes-Oxley
8 25 (6.05%) NCSC
9 24 (5.81%) ISO 22301
9 24 (5.81%) SOC 2
10 18 (4.36%) Cyber Essentials
11 17 (4.12%) IASME
11 17 (4.12%) ISO 9001
12 16 (3.87%) SOC 1
13 15 (3.63%) COSO
13 15 (3.63%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
14 13 (3.15%) ISO/IEC 27005
15 10 (2.42%) ISAE 3402
15 10 (2.42%) PSD2
System Software
1 15 (3.63%) Active Directory
2 8 (1.94%) ISA Server
3 2 (0.48%) BitLocker
Systems Management
1 9 (2.18%) Nessus
2 8 (1.94%) Trend Micro Deep Security
3 5 (1.21%) EMC NetWorker
3 5 (1.21%) Kubernetes
4 4 (0.97%) CASB
4 4 (0.97%) Single Sign-On
5 2 (0.48%) EnCase
5 2 (0.48%) FTK
5 2 (0.48%) HP ALM
5 2 (0.48%) HP Fortify
5 2 (0.48%) Kibana
5 2 (0.48%) QRadar
5 2 (0.48%) WebInspect
6 1 (0.24%) Ansible
6 1 (0.24%) Opscode Chef
Vendors
1 33 (7.99%) Microsoft
2 20 (4.84%) Oracle
3 17 (4.12%) Splunk
4 11 (2.66%) Okta
4 11 (2.66%) Tripwire
5 10 (2.42%) Google
6 9 (2.18%) Cisco
7 8 (1.94%) Centrify
7 8 (1.94%) CrowdStrike
7 8 (1.94%) F5
7 8 (1.94%) Imperva
7 8 (1.94%) OneTrust
7 8 (1.94%) Trend Micro
8 7 (1.69%) Alteryx
8 7 (1.69%) SAP
9 6 (1.45%) AlienVault
9 6 (1.45%) CheckPoint
9 6 (1.45%) Palo Alto
10 5 (1.21%) Cubic Transportation
11 4 (0.97%) CyberArk