Period
to 29 July 2021

The following table provides summary statistics for permanent job vacancies with a requirement for CISSP qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 29 July 2021 with a comparison to the same period in the previous 2 years.

(ISC)² Certified Information Systems Security Professional (ISC2 CISSP)
UK
6 months to
29 Jul 2021
Same period 2020 Same period 2019
Rank 341 229 239
Rank change year-on-year -112 +10 -35
Permanent jobs citing CISSP 1,051 1,026 2,107
As % of all permanent jobs advertised in the UK 0.93% 1.49% 1.46%
As % of the Qualifications category 4.34% 6.74% 6.06%
Number of salaries quoted 830 823 1,593
10th Percentile £42,500 £42,500 £42,500
25th Percentile £53,563 £50,000 £51,543
Median annual salary (50th Percentile) £65,000 £63,500 £65,000
Median % change year-on-year +2.36% -2.31% +4.00%
75th Percentile £81,250 £80,000 £80,000
90th Percentile £91,250 £97,250 £95,000
UK excluding London median annual salary £61,000 £60,000 £60,000
% change year-on-year +1.67% 0.00% -

CISSP is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK
Permanent vacancies requiring academic qualifications or professional certifications 24,207 15,214 34,792
As % of all permanent IT jobs advertised in the UK 21.44% 22.05% 24.16%
Number of salaries quoted 13,990 11,405 25,623
10th Percentile £31,250 £30,000 £26,400
25th Percentile £41,250 £38,000 £35,000
Median annual salary (50th Percentile) £55,000 £52,500 £50,000
Median % change year-on-year +4.76% +5.00% -
75th Percentile £72,500 £70,000 £66,250
90th Percentile £87,500 £85,000 £82,500
UK excluding London median annual salary £48,000 £47,500 £45,000
% change year-on-year +1.05% +5.56% -

CISSP
Job Vacancy Trend

Job postings citing CISSP as a proportion of all IT jobs advertised.

Job vacancy trend for CISSP in the UK

CISSP
Salary Trend

3-month moving average salary quoted in jobs citing CISSP.

Salary trend for CISSP in the UK

CISSP
Salary Histogram

Salary distribution for jobs citing CISSP over the 6 months to 29 July 2021.

Salary histogram for CISSP in the UK

CISSP
Top 17 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CISSP within the UK over the 6 months to 29 July 2021. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -115 951 £65,000 - 179
UK excluding London -78 527 £61,000 +1.67% 133
London -135 445 £70,000 - 68
South East -36 206 £60,500 +3.86% 37
Work from Home -108 200 £75,000 +29.87% 48
North of England -70 86 £60,000 - 35
Midlands -95 83 £67,500 +17.90% 14
West Midlands -90 65 £67,500 +18.42% 8
South West -84 59 £54,000 -16.92% 12
East of England -18 54 £77,500 +19.23% 13
North West -73 46 £60,000 +4.35% 21
Scotland -64 40 £60,000 +19.31% 14
Yorkshire -71 25 £60,000 - 13
North East -5 18 £60,000 -7.69% 1
East Midlands -38 15 £65,000 - 5
Channel Islands - 5 £80,000 -
Wales -25 3 £56,439 +7.50% 8

For the 6 months to 29 July 2021, IT jobs citing CISSP also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for CISSP.

1 657 (62.51%) CISM
2 644 (61.27%) Information Security
3 582 (55.38%) Cybersecurity
4 405 (38.53%) ISO/IEC 27001
5 296 (28.16%) CISA
6 288 (27.40%) Social Skills
7 282 (26.83%) NIST
8 272 (25.88%) Azure
9 265 (25.21%) Risk Management
10 230 (21.88%) SIEM
11 216 (20.55%) Management Information System
12 215 (20.46%) Firewall
13 211 (20.08%) Security Operations
14 204 (19.41%) Security Architecture
15 203 (19.31%) Finance
16 195 (18.55%) GDPR
17 188 (17.89%) Cisco Certification
18 187 (17.79%) Microsoft
19 171 (16.27%) Degree
20 163 (15.51%) Vulnerability Management
21 159 (15.13%) AWS
22 139 (13.23%) Penetration Testing
22 139 (13.23%) Analytical Skills
23 138 (13.13%) Security Management
24 134 (12.75%) PCI DSS
25 132 (12.56%) CEH
26 130 (12.37%) Security Cleared
27 126 (11.99%) Cyber Essentials
28 120 (11.42%) Network Security
29 119 (11.32%) ITIL

CISSP
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 33 (3.14%) IIS
2 15 (1.43%) SharePoint
3 10 (0.95%) MTS
4 8 (0.76%) Apache Spark
5 3 (0.29%) Confluence
6 2 (0.19%) Elasticsearch
6 2 (0.19%) MS Exchange
Applications
1 24 (2.28%) Microsoft Office
2 20 (1.90%) Microsoft Excel
2 20 (1.90%) MS Visio
3 14 (1.33%) Microsoft PowerPoint
4 6 (0.57%) Gephi
5 1 (0.095%) Microsoft Project
Business Applications
1 10 (0.95%) Sentinel
2 4 (0.38%) NetSuite
3 3 (0.29%) RESILIA
4 1 (0.095%) Distributed Ledger
4 1 (0.095%) Relativity
Cloud Services
1 272 (25.88%) Azure
2 159 (15.13%) AWS
3 104 (9.90%) Microsoft 365
4 49 (4.66%) GCP
5 45 (4.28%) SaaS
6 38 (3.62%) Cloud Computing
7 36 (3.43%) PaaS
8 32 (3.04%) IaaS
9 27 (2.57%) Azure Sentinel
10 26 (2.47%) Azure Active Directory
11 18 (1.71%) Serverless
12 9 (0.86%) Amazon EKS
12 9 (0.86%) Azure Service Bus
13 8 (0.76%) Mimecast
14 7 (0.67%) Amazon GuardDuty
14 7 (0.67%) Dynamics 365
14 7 (0.67%) OpenShift
15 5 (0.48%) Akamai
15 5 (0.48%) Power Platform
15 5 (0.48%) Sumo Logic
Communications & Networking
1 215 (20.46%) Firewall
2 120 (11.42%) Network Security
3 58 (5.52%) Intrusion Detection
4 52 (4.95%) VPN
5 45 (4.28%) WAN
6 43 (4.09%) DNS
6 43 (4.09%) TCP/IP
7 31 (2.95%) LAN
8 28 (2.66%) Internet
9 26 (2.47%) DHCP
10 21 (2.00%) SAN
11 16 (1.52%) HTTP
12 14 (1.33%) DMZ
12 14 (1.33%) Wireless
13 13 (1.24%) BGP
13 13 (1.24%) OSPF
14 10 (0.95%) Cisco ASA
14 10 (0.95%) Reverse Proxy
14 10 (0.95%) SMTP
14 10 (0.95%) Wi-Fi
Database & Business Intelligence
1 11 (1.05%) Big Data
2 6 (0.57%) Apache Hive
2 6 (0.57%) Azure SQL Database
2 6 (0.57%) Data Warehouse
2 6 (0.57%) Impala
2 6 (0.57%) SQL Server
3 5 (0.48%) Blockchain
4 4 (0.38%) Amazon RDS
5 3 (0.29%) Oracle Database
5 3 (0.29%) Oracle Database 11g
6 2 (0.19%) Amazon Athena
6 2 (0.19%) Amazon DynamoDB
6 2 (0.19%) Amazon Redshift
6 2 (0.19%) Data Lake
6 2 (0.19%) Maltego
7 1 (0.095%) DB2
7 1 (0.095%) GIS
7 1 (0.095%) Power BI
7 1 (0.095%) SQL Server 2012
7 1 (0.095%) SQL Server 2014
Development Applications
1 11 (1.05%) JIRA
2 6 (0.57%) Bitbucket
2 6 (0.57%) Bitbucket Server
2 6 (0.57%) Burp Suite
2 6 (0.57%) Git (software)
2 6 (0.57%) git-flow
3 2 (0.19%) GitLab
3 2 (0.19%) kappa
4 1 (0.095%) Emacs
4 1 (0.095%) IDA Disassembler
4 1 (0.095%) Metasploit
General
1 288 (27.40%) Social Skills
2 203 (19.31%) Finance
3 139 (13.23%) Analytical Skills
4 86 (8.18%) Legal
5 50 (4.76%) Banking
6 35 (3.33%) Public Sector
7 34 (3.24%) Telecoms
8 32 (3.04%) Law
8 32 (3.04%) Retail
9 26 (2.47%) Presentation Skills
10 22 (2.09%) Influencing Skills
11 19 (1.81%) Marketing
12 17 (1.62%) Organisational Skills
13 16 (1.52%) Inclusion and Diversity
13 16 (1.52%) Manufacturing
14 14 (1.33%) Police
15 11 (1.05%) Aerospace
15 11 (1.05%) Games
16 9 (0.86%) Electronics
17 8 (0.76%) French Language
Job Titles
1 164 (15.60%) Analyst
2 163 (15.51%) Architect
3 160 (15.22%) Consultant
4 141 (13.42%) Security Manager
5 138 (13.13%) Security Architect
6 136 (12.94%) Security Engineer
7 123 (11.70%) Security Consultant
8 115 (10.94%) Security Analyst
9 67 (6.37%) Information Manager
10 66 (6.28%) Information Security Manager
11 57 (5.42%) Head of Security
12 52 (4.95%) IT Analyst
13 50 (4.76%) Security Specialist
14 45 (4.28%) Security Officer
15 43 (4.09%) Cybersecurity Consultant
15 43 (4.09%) IT Security Analyst
16 40 (3.81%) Information Analyst
16 40 (3.81%) Information Security Analyst
17 39 (3.71%) Cloud Architect
18 37 (3.52%) Information Security Consultant
Libraries, Frameworks & Software Standards
1 17 (1.62%) .NET
2 16 (1.52%) Web Services
3 13 (1.24%) Middleware
4 12 (1.14%) SAML
5 9 (0.86%) OAuth
6 8 (0.76%) Kafka
7 7 (0.67%) .NET Framework
8 6 (0.57%) Elastic Stack
9 5 (0.48%) .NET Core
9 5 (0.48%) ISPF
9 5 (0.48%) LDAP
9 5 (0.48%) Regular Expression
9 5 (0.48%) RESTful
9 5 (0.48%) SOAP
9 5 (0.48%) XML
10 4 (0.38%) ASP.NET
10 4 (0.38%) J2EE
11 3 (0.29%) SailPoint
12 1 (0.095%) JSON
12 1 (0.095%) YAML
Miscellaneous
1 216 (20.55%) Management Information System
2 63 (5.99%) Cyberthreat
3 33 (3.14%) Cyber Kill Chain
4 31 (2.95%) Cloud Native
4 31 (2.95%) Security Operations Centre
5 29 (2.76%) Data Centre
6 27 (2.57%) Data Protection Act
7 25 (2.38%) Public Cloud
8 24 (2.28%) Self-Motivation
9 21 (2.00%) Distributed Denial-of-Service
10 20 (1.90%) Cyberattack
10 20 (1.90%) Hybrid Cloud
11 18 (1.71%) Virtual Team
12 14 (1.33%) Private Cloud
12 14 (1.33%) SCADA
13 12 (1.14%) Analytical Mindset
13 12 (1.14%) CESG
13 12 (1.14%) Cyber Defence
13 12 (1.14%) Greenfield Project
13 12 (1.14%) Smart Meter
Operating Systems
1 95 (9.04%) Windows
2 79 (7.52%) Linux
3 25 (2.38%) Windows Server
4 23 (2.19%) Unix
5 11 (1.05%) Windows 10
6 10 (0.95%) Mac OS
7 7 (0.67%) Red Hat Enterprise Linux
8 6 (0.57%) Debian
9 5 (0.48%) SUSE
10 4 (0.38%) Kali Linux
11 3 (0.29%) Apple iOS
11 3 (0.29%) VMS
12 2 (0.19%) Android
12 2 (0.19%) CentOS
12 2 (0.19%) Fedora
12 2 (0.19%) Mac OS X
12 2 (0.19%) Ubuntu
12 2 (0.19%) Windows Server 2012
13 1 (0.095%) Windows 7
13 1 (0.095%) Windows Server 2008
Processes & Methodologies
1 644 (61.27%) Information Security
2 582 (55.38%) Cybersecurity
3 265 (25.21%) Risk Management
4 230 (21.88%) SIEM
5 211 (20.08%) Security Operations
6 204 (19.41%) Security Architecture
7 163 (15.51%) Vulnerability Management
8 139 (13.23%) Penetration Testing
9 138 (13.13%) Security Management
10 119 (11.32%) ITIL
11 118 (11.23%) Agile Software Development
11 118 (11.23%) Data Protection
12 101 (9.61%) Identity Access Management
12 101 (9.61%) TOGAF
13 87 (8.28%) Continuous Improvement
13 87 (8.28%) Problem-Solving
13 87 (8.28%) Stakeholder Management
14 86 (8.18%) Incident Management
15 85 (8.09%) Computer Science
16 84 (7.99%) Information Security Management
Programming Languages
1 42 (4.00%) Python
2 39 (3.71%) C
3 33 (3.14%) PowerShell
4 18 (1.71%) SQL
5 16 (1.52%) Go
6 14 (1.33%) Java
7 12 (1.14%) Bash Shell
8 7 (0.67%) C#
8 7 (0.67%) Perl
9 6 (0.57%) JavaScript
9 6 (0.57%) R
9 6 (0.57%) VB.NET
9 6 (0.57%) VBScript
10 5 (0.48%) VBA
11 2 (0.19%) Scala
12 1 (0.095%) C++
Qualifications
1 657 (62.51%) CISM
2 296 (28.16%) CISA
3 188 (17.89%) Cisco Certification
4 171 (16.27%) Degree
5 132 (12.56%) CEH
6 130 (12.37%) Security Cleared
7 108 (10.28%) (ISC)2 CCSP
8 107 (10.18%) SANS
9 100 (9.51%) GIAC
10 97 (9.23%) CRISC
11 93 (8.85%) CompTIA Security+
12 73 (6.95%) SSCP
13 61 (5.80%) SC Cleared
14 59 (5.61%) CCNA
14 59 (5.61%) OSCP
15 52 (4.95%) CESG Certified Professional
16 50 (4.76%) Microsoft Certification
17 43 (4.09%) CSSLP
18 42 (4.00%) MCSE
19 36 (3.43%) DV Cleared
Quality Assurance & Compliance
1 405 (38.53%) ISO/IEC 27001
2 282 (26.83%) NIST
3 195 (18.55%) GDPR
4 134 (12.75%) PCI DSS
5 126 (11.99%) Cyber Essentials
6 87 (8.28%) GRC
7 80 (7.61%) NCSC
8 72 (6.85%) COBIT
9 28 (2.66%) NIST 800
10 25 (2.38%) Cyber Essentials PLUS
11 23 (2.19%) Sarbanes-Oxley
12 21 (2.00%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
13 18 (1.71%) RMADS
14 17 (1.62%) ISO/IEC 27005
14 17 (1.62%) JSP 440
15 12 (1.14%) HIPAA
16 9 (0.86%) HMG Security Policy Framework
17 7 (0.67%) ITGC
17 7 (0.67%) QA
17 7 (0.67%) SLA
System Software
1 77 (7.33%) Active Directory
2 17 (1.62%) VMware Infrastructure
3 8 (0.76%) Virtual Machines
4 7 (0.67%) Hyper-V
5 6 (0.57%) Apache Flume
6 5 (0.48%) Docker
6 5 (0.48%) Virtual Desktop
7 4 (0.38%) VMware ESXi
8 3 (0.29%) Firmware
9 2 (0.19%) NFS
9 2 (0.19%) pfSense
9 2 (0.19%) Samba
9 2 (0.19%) Terminal Server
9 2 (0.19%) VirtualBox
9 2 (0.19%) Xen
10 1 (0.095%) BitLocker
10 1 (0.095%) Forefront TMG
10 1 (0.095%) vSphere
10 1 (0.095%) XenApp
10 1 (0.095%) XenDesktop
Systems Management
1 34 (3.24%) QRadar
2 28 (2.66%) Kubernetes
3 25 (2.38%) Nessus
4 16 (1.52%) Single Sign-On
5 14 (1.33%) Kibana
6 12 (1.14%) Ansible
6 12 (1.14%) CASB
7 11 (1.05%) Active Directory Federation Services
8 8 (0.76%) CSIRT
9 7 (0.67%) Puppet
10 6 (0.57%) EnCase
10 6 (0.57%) Oozie
10 6 (0.57%) SCCM
10 6 (0.57%) Terraform
11 5 (0.48%) Microsoft Intune
11 5 (0.48%) RSA Archer
12 4 (0.38%) Consul
12 4 (0.38%) EMC NetWorker
12 4 (0.38%) Istio
13 3 (0.29%) SCOM
Vendors
1 187 (17.79%) Microsoft
2 61 (5.80%) Cisco
3 58 (5.52%) Splunk
4 37 (3.52%) Google
4 37 (3.52%) Palo Alto
5 26 (2.47%) VMware
6 24 (2.28%) AlienVault
7 16 (1.52%) CheckPoint
7 16 (1.52%) Symantec
8 15 (1.43%) LogRhythm
9 14 (1.33%) Meraki
10 12 (1.14%) Qualys
10 12 (1.14%) SolarWinds
11 11 (1.05%) Juniper
11 11 (1.05%) Rapid7
12 10 (0.95%) Apple
12 10 (0.95%) Oracle
13 9 (0.86%) McAfee
13 9 (0.86%) SAP
13 9 (0.86%) Sophos