ISACA Certified Information Security Manager (CISM)
UK

The table below provides summary statistics for permanent job vacancies with a requirement for CISM qualifications. It includes a benchmarking guide to the salaries offered over the 6 months leading up to 31 May 2025, comparing them to the same period in the previous two years.

6 months to
31 May 2025
Same period 2024 Same period 2023
Rank 323 412 401
Rank change year-on-year +89 -11 +174
Permanent jobs citing CISM 476 631 779
As % of all permanent jobs advertised in the UK 0.85% 0.61% 0.81%
As % of the Qualifications category 1.75% 2.26% 2.42%
Number of salaries quoted 223 502 595
10th Percentile £51,275 £47,500 £46,250
25th Percentile £55,375 £57,500 £55,000
Median annual salary (50th Percentile) £72,500 £72,500 £70,000
Median % change year-on-year - +3.57% -
75th Percentile £85,000 £85,000 £87,500
90th Percentile £95,000 £101,250 £102,500
UK excluding London median annual salary £63,750 £65,000 £64,975
% change year-on-year -1.92% +0.04% -0.04%

All Academic and Professional Certifications
UK

CISM falls under the Academic Qualifications and Professional Certifications category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring academic qualifications or professional certifications.

Permanent vacancies requiring academic qualifications or professional certifications 27,184 27,860 32,185
As % of all permanent jobs advertised in the UK 48.68% 26.87% 33.60%
Number of salaries quoted 11,043 17,264 14,482
10th Percentile £31,750 £28,500 £32,000
25th Percentile £43,364 £38,500 £42,500
Median annual salary (50th Percentile) £55,000 £53,500 £60,000
Median % change year-on-year +2.80% -10.83% +9.09%
75th Percentile £68,750 £71,000 £77,500
90th Percentile £82,500 £87,500 £95,000
UK excluding London median annual salary £52,500 £50,000 £52,500
% change year-on-year +5.00% -4.76% +5.00%

CISM
Job Vacancy Trend

Job postings citing CISM as a proportion of all IT jobs advertised.

Job vacancy trend for CISM in the UK

CISM
Salary Trend

3-month moving average salary quoted in jobs citing CISM.

Salary trend for CISM in the UK

CISM
Salary Histogram

Salary distribution for jobs citing CISM over the 6 months to 31 May 2025.

Salary histogram for CISM in the UK

CISM
Top 17 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CISM within the UK over the 6 months to 31 May 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +84 450 £70,000 - 285
UK excluding London +147 330 £63,750 -1.92% 148
Midlands +149 171 £57,500 -17.86% 16
London +4 123 £82,500 +3.13% 162
West Midlands +130 119 £57,500 -23.33% 8
Work from Home +1 98 £65,000 -10.34% 157
South East +110 70 £65,000 - 33
East Midlands +78 52 £58,750 -11.65% 8
North of England -25 41 £57,500 -4.17% 36
North West -53 31 £55,043 +5.68% 20
South West +53 22 £66,250 -3.28% 22
Scotland +91 13 £95,000 +58.33% 26
East of England +39 10 £51,711 +3.42% 8
Yorkshire +50 5 £57,500 -27.98% 6
North East +48 5 £80,000 +0.20% 11
Channel Islands 0 2 £78,750 -21.25% 3
Wales +41 1 £55,000 -35.29% 1

CISM
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 3 (0.63%) Confluence
1 3 (0.63%) SharePoint
2 2 (0.42%) IIS
2 2 (0.42%) TPMS
3 1 (0.21%) IBM Domino
3 1 (0.21%) Microsoft Exchange
3 1 (0.21%) Oracle Workflow
Applications
1 6 (1.26%) Microsoft Excel
1 6 (1.26%) Microsoft Office
2 4 (0.84%) Microsoft PowerPoint
3 3 (0.63%) MS Visio
Business Applications
1 3 (0.63%) SAP S/4HANA
Cloud Services
1 50 (10.50%) Azure
2 38 (7.98%) AWS
3 17 (3.57%) Microsoft 365
4 14 (2.94%) Azure Sentinel
5 12 (2.52%) Entra ID
6 10 (2.10%) GCP
7 8 (1.68%) SaaS
8 6 (1.26%) Power Platform
9 5 (1.05%) Azure Monitor
10 4 (0.84%) IaaS
11 3 (0.63%) Cloud Computing
12 2 (0.42%) Amazon ECS
12 2 (0.42%) Mimecast
12 2 (0.42%) WhatsApp
13 1 (0.21%) Cloudflare
13 1 (0.21%) Google Workspace
13 1 (0.21%) PaaS
13 1 (0.21%) Power Automate
13 1 (0.21%) Snowflake
Communications & Networking
1 78 (16.39%) Firewall
2 35 (7.35%) Network Security
3 31 (6.51%) Intrusion Detection
4 30 (6.30%) VPN
5 5 (1.05%) DNS
5 5 (1.05%) Kerberos
5 5 (1.05%) TCP/IP
6 4 (0.84%) HTTP
7 2 (0.42%) DMZ
7 2 (0.42%) LAN
7 2 (0.42%) S/MIME
7 2 (0.42%) SMTP
7 2 (0.42%) SSL
7 2 (0.42%) VoIP
7 2 (0.42%) WAN
7 2 (0.42%) X.509
8 1 (0.21%) IPsec
8 1 (0.21%) IPv4
8 1 (0.21%) SAN
8 1 (0.21%) Wireless
Database & Business Intelligence
1 6 (1.26%) Power BI
2 3 (0.63%) Oracle Reports
3 2 (0.42%) SQL Server
4 1 (0.21%) Hadoop
4 1 (0.21%) HBase
4 1 (0.21%) NoSQL
Development Applications
1 3 (0.63%) JIRA
2 1 (0.21%) Burp Suite
2 1 (0.21%) Metasploit
2 1 (0.21%) Subversion
General
1 151 (31.72%) Social Skills
2 79 (16.60%) Finance
3 71 (14.92%) Analytical Skills
4 43 (9.03%) Legal
5 21 (4.41%) Banking
5 21 (4.41%) Retail
6 16 (3.36%) Presentation Skills
7 11 (2.31%) Local Government
8 10 (2.10%) Public Sector
9 8 (1.68%) Inclusion and Diversity
10 7 (1.47%) Law
11 6 (1.26%) Publishing
12 5 (1.05%) Military
13 4 (0.84%) Organisational Skills
14 3 (0.63%) Documentation Skills
15 2 (0.42%) Aerospace
15 2 (0.42%) Aviation
15 2 (0.42%) Games
15 2 (0.42%) Influencing Skills
15 2 (0.42%) Telecoms
Job Titles
1 181 (38.03%) Security Engineer
2 147 (30.88%) Principal Engineer
2 147 (30.88%) Principal Security Engineer
3 131 (27.52%) Analyst
4 123 (25.84%) Security Analyst
5 87 (18.28%) Principal Security Analyst
5 87 (18.28%) Product Analyst
6 63 (13.24%) Security Manager
7 60 (12.61%) Product Engineer
8 43 (9.03%) Consultant
9 37 (7.77%) Security Consultant
10 29 (6.09%) Architect
11 27 (5.67%) Cybersecurity Consultant
11 27 (5.67%) Security Architect
12 25 (5.25%) Information Manager
12 25 (5.25%) Information Security Manager
13 23 (4.83%) Cybersecurity Manager
13 23 (4.83%) Senior
14 21 (4.41%) Lead
14 21 (4.41%) Managing Consultant
Libraries, Frameworks & Software Standards
1 6 (1.26%) SailPoint
2 5 (1.05%) LDAP
2 5 (1.05%) OAuth
2 5 (1.05%) OpenID
2 5 (1.05%) SAML
3 3 (0.63%) Oracle Fusion
4 2 (0.42%) EJB
4 2 (0.42%) Leaflet
5 1 (0.21%) HTML
5 1 (0.21%) ModSecurity
Miscellaneous
1 94 (19.75%) Management Information System
2 61 (12.82%) Security Posture
3 22 (4.62%) Cyber Threat
3 22 (4.62%) Self-Motivation
4 21 (4.41%) Life Science
5 17 (3.57%) Data Protection Act
6 14 (2.94%) Security Operations Centre
7 13 (2.73%) Social Media
7 13 (2.73%) Team-Oriented Environment
8 9 (1.89%) Onboarding
9 8 (1.68%) Cyber Defence
10 7 (1.47%) PKI
10 7 (1.47%) Taxonomies
11 6 (1.26%) Freedom of Information
11 6 (1.26%) Freedom of Information Act
12 4 (0.84%) Cloud Native
12 4 (0.84%) Renewable Energy
13 3 (0.63%) Analytical Mindset
13 3 (0.63%) CESG
13 3 (0.63%) Cloud Security Posture
Operating Systems
1 38 (7.98%) Windows
2 13 (2.73%) Windows Vista
3 7 (1.47%) Linux
3 7 (1.47%) Windows Server
4 1 (0.21%) Kali Linux
Processes & Methodologies
1 374 (78.57%) Cybersecurity
2 330 (69.33%) Information Security
3 279 (58.61%) Risk Management
4 168 (35.29%) Project Management
5 154 (32.35%) Cyber Resilience
5 154 (32.35%) Security Testing
6 87 (18.28%) Incident Response
7 72 (15.13%) Continuous Improvement
8 69 (14.50%) Problem-Solving
9 66 (13.87%) SIEM
10 59 (12.39%) Agile
10 59 (12.39%) Cloud Security
11 58 (12.18%) Stakeholder Management
12 54 (11.34%) Mentoring
12 54 (11.34%) Stakeholder Engagement
12 54 (11.34%) Vulnerability Management
13 50 (10.50%) Regulatory Compliance
14 49 (10.29%) Data Protection
15 47 (9.87%) Security Operations
16 46 (9.66%) Roadmaps
Programming Languages
1 14 (2.94%) PowerShell
2 12 (2.52%) R
3 8 (1.68%) Kusto Query Language
4 7 (1.47%) Python
5 5 (1.05%) Bash
6 2 (0.42%) Shell Script
6 2 (0.42%) SQL
6 2 (0.42%) VBA
7 1 (0.21%) C#
7 1 (0.21%) C++
7 1 (0.21%) Java
7 1 (0.21%) Perl
Qualifications
1 443 (93.07%) CISSP
2 258 (54.20%) Degree
3 155 (32.56%) CESG Certified Professional
4 149 (31.30%) BPSS Clearance
5 82 (17.23%) CRISC
6 80 (16.81%) CISA
7 45 (9.45%) CEH
8 33 (6.93%) Cisco Certification
8 33 (6.93%) Master's Degree
9 30 (6.30%) (ISC)2 CCSP
10 27 (5.67%) CompTIA Security+
10 27 (5.67%) Security Cleared
11 23 (4.83%) GIAC
12 20 (4.20%) SANS
13 19 (3.99%) Computer Science Degree
14 17 (3.57%) SC Cleared
15 14 (2.94%) CCSP
16 13 (2.73%) DBS Check
16 13 (2.73%) ISO 27001 Lead Implementer
17 11 (2.31%) ISACA
Quality Assurance & Compliance
1 318 (66.81%) ISO/IEC 27001
2 317 (66.60%) NIST
3 153 (32.14%) JSP 440
4 151 (31.72%) RMADS
5 59 (12.39%) GDPR
6 57 (11.97%) GRC
7 53 (11.13%) Cyber Essentials
8 34 (7.14%) PCI DSS
9 29 (6.09%) NCSC
9 29 (6.09%) SOC 2
10 23 (4.83%) COBIT
10 23 (4.83%) Cyber Essentials PLUS
11 16 (3.36%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
12 13 (2.73%) Accessibility
12 13 (2.73%) NIST 800
13 10 (2.10%) HIPAA
14 7 (1.47%) SOC 1
15 6 (1.26%) Def Stans
16 5 (1.05%) QA
17 4 (0.84%) Sarbanes-Oxley
System Software
1 15 (3.15%) Active Directory
2 3 (0.63%) Docker
3 1 (0.21%) HDFS
3 1 (0.21%) Hyper-V
3 1 (0.21%) Virtual Machines
3 1 (0.21%) VMware Infrastructure
Systems Management
1 11 (2.31%) Microsoft Intune
2 9 (1.89%) QRadar
3 8 (1.68%) RSA Archer
4 7 (1.47%) Nessus
4 7 (1.47%) Single Sign-On
5 6 (1.26%) FortiGate
6 5 (1.05%) Terraform
7 3 (0.63%) Computer Emergency Response Teams
8 2 (0.42%) CASB
8 2 (0.42%) Kubernetes
9 1 (0.21%) MaaS360
9 1 (0.21%) OpenVAS
Vendors
1 60 (12.61%) Microsoft
2 16 (3.36%) Tenable
3 14 (2.94%) VMware
4 10 (2.10%) Cisco
4 10 (2.10%) Splunk
5 9 (1.89%) Palo Alto
6 7 (1.47%) Google
6 7 (1.47%) Qualys
7 6 (1.26%) CrowdStrike
8 5 (1.05%) Fortinet
8 5 (1.05%) SolarWinds
9 4 (0.84%) Juniper
9 4 (0.84%) Oracle
9 4 (0.84%) Sophos
10 3 (0.63%) SAP
10 3 (0.63%) Zscaler
11 2 (0.42%) AlienVault
11 2 (0.42%) Proofpoint
11 2 (0.42%) Thales
11 2 (0.42%) Trend Micro