Period
to 18 February 2018

The following table provides summary statistics for permanent job vacancies with a requirement for CISA qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 18 February 2018 with a comparison to the same period in the previous 2 years.

ISACA Certified Information Systems Auditor (CISA)
UK
6 months to
18 Feb 2018
Same period 2017 Same period 2016
Rank 466 402 517
Rank change year-on-year -64 +115 +190
Permanent jobs citing CISA 1,059 1,309 1,148
As % of all permanent IT jobs advertised in the UK 0.61% 0.75% 0.54%
As % of the Qualifications category 2.57% 2.95% 1.97%
Number of salaries quoted 876 1,069 906
UK median annual salary £62,500 £62,500 £60,000
Median salary % change year-on-year - +4.17% +1.27%
10th Percentile £41,250 £37,500 £40,500
90th Percentile £97,500 £90,000 £86,250
UK excluding London median annual salary £57,500 £57,000 £57,500
% change year-on-year +0.88% -0.87% +4.55%

CISA is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK
Permanent vacancies requiring academic qualifications or professional certifications 41,162 44,406 58,342
As % of all permanent IT jobs advertised in the UK 23.63% 25.43% 27.69%
Number of salaries quoted 31,917 35,148 46,519
UK median annual salary £47,500 £45,000 £45,000
Median salary % change year-on-year +5.56% - -
10th Percentile £26,250 £26,250 £26,250
90th Percentile £78,750 £76,250 £75,000
UK excluding London median annual salary £42,500 £42,500 £42,500

CISA
Job Vacancy Trend

Job postings citing CISA as a percentage of all IT jobs advertised.

Job vacancy trend for CISA in the UK

CISA
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing CISA.

Salary trend for CISA in the UK

CISA
Salary Histogram

The salary distribution of IT jobs citing CISA over the 6 months to 18 February 2018.

Salary histogram for CISA in the UK

CISA
Top 15 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CISA within the UK over the 6 months to 18 February 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -52 1,031 £62,500 - 109
London -60 576 £70,000 +5.66% 52
UK excluding London -29 458 £57,500 +0.88% 61
North of England +45 168 £50,000 +11.11% 14
South East +20 163 £67,500 +12.50% 23
North West +18 81 £57,500 +4.55% 5
Yorkshire +25 72 £41,500 +10.67% 7
Midlands -43 53 £50,000 -4.76% 6
East of England -25 42 £60,000 +29.73% 10
West Midlands -34 33 £50,000 -4.76% 2
East Midlands +18 20 £47,500 -13.64% 4
South West -35 20 £57,500 -4.17% 4
North East -25 15 £50,000 +11.11% 2
Scotland -46 8 £60,000 +26.32% 1
Wales +3 4 £55,000 +4.76% 3

For the 6 months to 18 February 2018, IT jobs citing CISA also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for CISA.

1 937 (88.48%) CISSP
2 765 (72.24%) CISM
3 725 (68.46%) Information Security
4 434 (40.98%) Finance
5 414 (39.09%) ISO/IEC 27001
6 332 (31.35%) Cybersecurity
7 270 (25.50%) GDPR
8 265 (25.02%) Risk Management
9 255 (24.08%) SIEM
10 216 (20.40%) PCI DSS
11 214 (20.21%) Degree
12 194 (18.32%) Data Protection
13 192 (18.13%) Management Information System
14 163 (15.39%) IT Audit
15 162 (15.30%) Firewall
16 157 (14.83%) Security Operations
17 155 (14.64%) GIAC
18 150 (14.16%) CRISC
19 147 (13.88%) Vulnerability Management
20 145 (13.69%) CEH
21 135 (12.75%) Microsoft
22 133 (12.56%) ITIL
23 132 (12.46%) SANS
24 123 (11.61%) Penetration Testing
25 117 (11.05%) Stakeholder Management
26 115 (10.86%) Windows
27 110 (10.39%) Legal
28 107 (10.10%) Banking
29 105 (9.92%) Security Architecture
30 104 (9.82%) SSCP

CISA
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 38 (3.59%) SharePoint
2 9 (0.85%) Apache
3 4 (0.38%) IIS
Applications
1 31 (2.93%) Microsoft Office
2 12 (1.13%) Microsoft Excel
2 12 (1.13%) Microsoft PowerPoint
3 5 (0.47%) MS Visio
Business Applications
1 34 (3.21%) Dynamics CRM
2 5 (0.47%) SAP S/4HANA
3 4 (0.38%) SAP GRC
4 2 (0.19%) SAP CO
4 2 (0.19%) SAP FI
4 2 (0.19%) SAP FI/CO
5 1 (0.094%) Oracle Cash Management
5 1 (0.094%) Oracle Procure-to-Pay
5 1 (0.094%) SAP R/3
5 1 (0.094%) SunGard APT
Cloud Services
1 54 (5.10%) Microsoft Azure
2 51 (4.82%) Office 365
3 37 (3.49%) OneDrive
4 27 (2.55%) SaaS
5 16 (1.51%) Mimecast
6 13 (1.23%) Amazon AWS
7 12 (1.13%) IaaS
7 12 (1.13%) PaaS
8 1 (0.094%) Cloud Computing
Communications & Networking
1 162 (15.30%) Firewall
2 55 (5.19%) TCP/IP
3 52 (4.91%) Network Security
4 44 (4.15%) Internet
5 42 (3.97%) Intrusion Detection
6 24 (2.27%) VPN
7 21 (1.98%) SSL
7 21 (1.98%) Wireless
8 16 (1.51%) DKIM
8 16 (1.51%) DMARC
8 16 (1.51%) VoIP
9 15 (1.42%) LAN
10 14 (1.32%) WAN
11 11 (1.04%) HTTP
12 10 (0.94%) IPsec
13 8 (0.76%) DNS
13 8 (0.76%) MPLS
13 8 (0.76%) SMTP
13 8 (0.76%) SNMP
14 6 (0.57%) VLAN
Database & Business Intelligence
1 18 (1.70%) Big Data
2 9 (0.85%) MySQL
3 3 (0.28%) Blockchain
4 2 (0.19%) Oracle Database
4 2 (0.19%) Power BI
5 1 (0.094%) DB2
5 1 (0.094%) GIS
5 1 (0.094%) SAP BW
Development Applications
1 23 (2.17%) Metasploit
2 20 (1.89%) Burp Suite
3 5 (0.47%) AppScan
4 2 (0.19%) SonarQube
4 2 (0.19%) WebScarab
General
1 434 (40.98%) Finance
2 110 (10.39%) Legal
3 107 (10.10%) Banking
4 47 (4.44%) Law
5 41 (3.87%) Retail
6 16 (1.51%) Telecoms
7 13 (1.23%) Marketing
8 12 (1.13%) Front Office
9 10 (0.94%) Investment Banking
10 9 (0.85%) Manufacturing
10 9 (0.85%) Retail Banking
11 8 (0.76%) Military
12 7 (0.66%) French Language
12 7 (0.66%) Games
12 7 (0.66%) German Language
13 5 (0.47%) Advertising
14 4 (0.38%) Automotive
14 4 (0.38%) Billing
15 3 (0.28%) Back Office
15 3 (0.28%) Publishing
Job Titles
1 203 (19.17%) Security Manager
2 167 (15.77%) Analyst
3 131 (12.37%) Consultant
3 131 (12.37%) Information Security Manager
4 129 (12.18%) Security Analyst
5 127 (11.99%) Information Manager
6 121 (11.43%) Risk Manager
7 119 (11.24%) IT Manager
8 105 (9.92%) Security Consultant
9 87 (8.22%) Security Officer
10 80 (7.55%) Information Analyst
10 80 (7.55%) Information Security Analyst
11 76 (7.18%) IT Risk Manager
12 66 (6.23%) Information Security Officer
13 63 (5.95%) Security Engineer
14 58 (5.48%) Architect
15 56 (5.29%) Information Officer
16 54 (5.10%) Audit Manager
16 54 (5.10%) Security Architect
17 52 (4.91%) Auditor
Libraries, Frameworks & Software Standards
1 6 (0.57%) SailPoint
2 3 (0.28%) Middleware
3 2 (0.19%) .NET
3 2 (0.19%) HTML
3 2 (0.19%) Java EE
3 2 (0.19%) OAuth
3 2 (0.19%) OpenID
3 2 (0.19%) XACML
4 1 (0.094%) CSS
Miscellaneous
1 192 (18.13%) Management Information System
2 96 (9.07%) Analytical Skills
3 93 (8.78%) Computer Science
4 69 (6.52%) Data Protection Act
5 36 (3.40%) PKI
5 36 (3.40%) Security Operations Centre
6 34 (3.21%) Cyberthreat
7 31 (2.93%) Data Centre
8 21 (1.98%) Greenfield Project
9 16 (1.51%) Distributed Denial-of-Service
10 14 (1.32%) CESG
10 14 (1.32%) Cyber Defence
11 12 (1.13%) Enterprise Software
11 12 (1.13%) Fintech
12 9 (0.85%) Algorithms
12 9 (0.85%) Cyber Kill Chain
12 9 (0.85%) Cyberattack
12 9 (0.85%) Data Structures
12 9 (0.85%) NHS
12 9 (0.85%) Virtual Team
Operating Systems
1 115 (10.86%) Windows
2 74 (6.99%) Linux
2 74 (6.99%) Unix
3 21 (1.98%) Kali Linux
4 18 (1.70%) Windows Server
5 14 (1.32%) VMS
6 9 (0.85%) FreeBSD
7 3 (0.28%) Apple iOS
8 1 (0.094%) OS/400
8 1 (0.094%) Red Hat Enterprise Linux
8 1 (0.094%) Ubuntu
Processes & Methodologies
1 725 (68.46%) Information Security
2 332 (31.35%) Cybersecurity
3 265 (25.02%) Risk Management
4 255 (24.08%) SIEM
5 194 (18.32%) Data Protection
6 163 (15.39%) IT Audit
7 157 (14.83%) Security Operations
8 147 (13.88%) Vulnerability Management
9 133 (12.56%) ITIL
10 123 (11.61%) Penetration Testing
11 117 (11.05%) Stakeholder Management
12 105 (9.92%) Security Architecture
13 100 (9.44%) Project Management
14 98 (9.25%) Data Loss Prevention
15 97 (9.16%) Security Management
16 92 (8.69%) ISMS
17 91 (8.59%) Incident Management
18 87 (8.22%) Internal Audit
19 78 (7.37%) Data Security
20 76 (7.18%) Information Security Management
Programming Languages
1 49 (4.63%) Python
2 48 (4.53%) Perl
3 41 (3.87%) Bash Shell
3 41 (3.87%) PowerShell
3 41 (3.87%) Ruby
4 36 (3.40%) C#
5 34 (3.21%) Bourne shell
5 34 (3.21%) Korn
6 13 (1.23%) C
7 10 (0.94%) Java
8 7 (0.66%) C++
9 5 (0.47%) SQL
10 4 (0.38%) PHP
11 2 (0.19%) JavaScript
12 1 (0.094%) Go
Qualifications
1 937 (88.48%) CISSP
2 765 (72.24%) CISM
3 214 (20.21%) Degree
4 155 (14.64%) GIAC
5 150 (14.16%) CRISC
6 145 (13.69%) CEH
7 132 (12.46%) SANS
8 104 (9.82%) SSCP
9 63 (5.95%) CompTIA Security+
9 63 (5.95%) QiCA
10 53 (5.00%) CSSLP
11 52 (4.91%) Cisco Certification
12 40 (3.78%) CCNA
12 40 (3.78%) ISO 27001 Lead Auditor
13 32 (3.02%) Computer Science Degree
13 32 (3.02%) Master's Degree
13 32 (3.02%) OSCP
14 31 (2.93%) CREST Certified
15 23 (2.17%) Security Cleared
16 22 (2.08%) CISMP
Quality Assurance & Compliance
1 414 (39.09%) ISO/IEC 27001
2 270 (25.50%) GDPR
3 216 (20.40%) PCI DSS
4 101 (9.54%) COBIT
5 70 (6.61%) Cyber Essentials
6 42 (3.97%) Sarbanes-Oxley
7 36 (3.40%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 30 (2.83%) ISO 22301
9 23 (2.17%) ISO 31000
10 16 (1.51%) ISO 9001
11 11 (1.04%) PMO
12 9 (0.85%) ISO/IEC 27005
12 9 (0.85%) RMADS
13 7 (0.66%) HIPAA
13 7 (0.66%) HMG Security Policy Framework
14 6 (0.57%) ISAE 3402
14 6 (0.57%) MiFID
14 6 (0.57%) QA
15 4 (0.38%) COSO
15 4 (0.38%) ISO/IEC 20000
System Software
1 37 (3.49%) Active Directory
2 11 (1.04%) vSphere
3 10 (0.94%) Hyper-V
4 7 (0.66%) Snort
4 7 (0.66%) VMware Infrastructure
5 6 (0.57%) Firmware
6 4 (0.38%) Virtual Machines
7 3 (0.28%) BitLocker
7 3 (0.28%) XenApp
Systems Management
1 48 (4.53%) Nessus
2 21 (1.98%) QRadar
3 19 (1.79%) Core Impact
4 15 (1.42%) SCCM
5 14 (1.32%) McAfee ePO
5 14 (1.32%) OpenVAS
6 12 (1.13%) CSIRT
6 12 (1.13%) RSA Security Analytics
7 9 (0.85%) Juniper STRM
7 9 (0.85%) RSA enVision
8 8 (0.76%) Norton AntiVirus
9 7 (0.66%) Single Sign-On
10 6 (0.57%) FTK
11 5 (0.47%) Host Intrusion Detection System
12 4 (0.38%) FortiGate
12 4 (0.38%) HP Fortify
13 3 (0.28%) Microsoft Intune
13 3 (0.28%) Nagios
13 3 (0.28%) Nexpose
13 3 (0.28%) PowerBroker
Vendors
1 135 (12.75%) Microsoft
2 52 (4.91%) Symantec
3 42 (3.97%) Cisco
4 34 (3.21%) Forcepoint
5 32 (3.02%) Splunk
6 30 (2.83%) LogRhythm
6 30 (2.83%) McAfee
7 25 (2.36%) Qualys
7 25 (2.36%) Sophos
8 22 (2.08%) Varonis
9 20 (1.89%) CyberArk
9 20 (1.89%) Oracle
9 20 (1.89%) Palo Alto
10 19 (1.79%) CheckPoint
11 18 (1.70%) SAP
12 15 (1.42%) IBM
13 13 (1.23%) Acunetix
13 13 (1.23%) CA
14 11 (1.04%) VMware
15 10 (0.94%) Juniper