Period
to 21 November 2017

The following table provides summary statistics for permanent job vacancies with a requirement for CRISC qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 21 November 2017 with a comparison to the same period in the previous 2 years.

ISACA Certified in Risk and Information Systems Control (CRISC)
UK
6 months to
21 Nov 2017
Same period 2016 Same period 2015
Rank 888 894 1062
Rank change year-on-year +6 +168 +107
Permanent jobs citing CRISC 319 352 239
As % of all permanent IT jobs advertised in the UK 0.18% 0.19% 0.11%
As % of the Qualifications category 0.73% 0.71% 0.40%
Number of salaries quoted 264 306 194
UK median annual salary £62,500 £65,000 £60,000
Median salary % change year-on-year -3.85% +8.33% +4.35%
10th Percentile £42,500 £37,500 £41,625
90th Percentile £91,250 £97,500 £93,750
UK excluding London median annual salary £52,000 £60,000 £55,000
% change year-on-year -13.33% +9.09% -

CRISC is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK
Permanent vacancies requiring academic qualifications or professional certifications 43463 49497 59652
As % of all permanent IT jobs advertised in the UK 24.02% 26.20% 27.45%
Number of salaries quoted 33413 39737 47653
UK median annual salary £47,500 £45,000 £45,000
Median salary % change year-on-year +5.56% - +1.12%
10th Percentile £26,000 £26,250 £25,875
90th Percentile £77,500 £76,250 £75,000
UK excluding London median annual salary £42,500 £42,500 £41,000
% change year-on-year - +3.66% +2.50%

CRISC
Job Vacancy Trend

Job postings citing CRISC as a percentage of all IT jobs advertised.

Job vacancy trend for CRISC in the UK

CRISC
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing CRISC.

Salary trend for CRISC in the UK

CRISC
Salary Histogram

The salary distribution of IT jobs citing CRISC over the 6 months to 21 November 2017.

Salary histogram for CRISC in the UK

CRISC
Top 15 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CRISC within the UK over the 6 months to 21 November 2017. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +13 310 £65,000 -3.70% 20
UK excluding London +44 174 £52,000 -13.33% 13
London -36 140 £72,500 +3.57% 7
South East +80 73 £50,000 -28.57% 4
North of England +51 68 £55,000 -12.00% 6
North West +44 53 £55,000 -15.38%
East of England -9 15 £45,000 +5.88% 2
Yorkshire +15 12 £52,500 -16.00% 4
Midlands +22 9 £61,250 +2.08% 1
West Midlands 0 8 £60,000 - 1
South West +10 4 £50,000 +14.29%
North East +10 3 £48,500 +36.62% 2
Scotland -35 3 £62,500 +38.89%
Wales +16 2 - -
East Midlands +41 1 £100,000 -

For the 6 months to 21 November 2017, IT jobs citing CRISC also mentioned the following skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all job ads with a requirement for CRISC.

1 295 (92.48%) CISSP
2 277 (86.83%) CISM
3 239 (74.92%) Information Security
4 181 (56.74%) Finance
5 171 (53.61%) CISA
6 160 (50.16%) ISO/IEC 27001
7 101 (31.66%) Risk Management
8 98 (30.72%) Management Information System
9 94 (29.47%) Cybersecurity
10 87 (27.27%) ITIL
11 82 (25.71%) Security Management
12 74 (23.20%) Information Security Management
13 70 (21.94%) GDPR
14 65 (20.38%) COBIT
15 63 (19.75%) Risk Assessment
16 62 (19.44%) Degree
17 55 (17.24%) Banking
18 54 (16.93%) Network Security
18 54 (16.93%) Firewall
19 53 (16.61%) Data Protection
19 53 (16.61%) Risk Analysis
20 52 (16.30%) Penetration Testing
21 51 (15.99%) SANS
22 47 (14.73%) PCI DSS
23 45 (14.11%) GIAC
23 45 (14.11%) Security Operations
24 40 (12.54%) Active Directory
25 39 (12.23%) ISMS
26 34 (10.66%) Internal Audit
26 34 (10.66%) IT Audit

CRISC
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 19 (5.96%) IIS
1 19 (5.96%) WebSphere
2 10 (3.13%) SharePoint
3 2 (0.63%) MS Exchange
Applications
1 11 (3.45%) Microsoft Excel
1 11 (3.45%) Microsoft Office
1 11 (3.45%) Microsoft PowerPoint
2 2 (0.63%) Chatbot
Cloud Services
1 3 (0.94%) Microsoft Azure
2 2 (0.63%) Mimecast
3 1 (0.31%) Amazon AWS
3 1 (0.31%) Office 365
Communications & Networking
1 54 (16.93%) Firewall
1 54 (16.93%) Network Security
2 8 (2.51%) Internet
3 3 (0.94%) Intrusion Detection
3 3 (0.94%) Reverse Proxy
4 2 (0.63%) HTTP
5 1 (0.31%) Cisco Nexus
5 1 (0.31%) SMS
Database & Business Intelligence
1 19 (5.96%) SQL Server
2 1 (0.31%) Blockchain
2 1 (0.31%) GIS
Development Applications
1 1 (0.31%) AppScan
General
1 181 (56.74%) Finance
2 55 (17.24%) Banking
3 27 (8.46%) Private Banking
4 19 (5.96%) Legal
5 17 (5.33%) Manufacturing
6 15 (4.70%) Marketing
6 15 (4.70%) Telecoms
7 12 (3.76%) Electronics
7 12 (3.76%) Retail
8 8 (2.51%) French Language
9 7 (2.19%) Front Office
9 7 (2.19%) German Language
9 7 (2.19%) Investment Banking
10 4 (1.25%) Games
10 4 (1.25%) Law
11 3 (0.94%) Retail Banking
12 2 (0.63%) Back Office
12 2 (0.63%) Billing
13 1 (0.31%) Advertising
13 1 (0.31%) Aerospace
Job Titles
1 84 (26.33%) Analyst
2 68 (21.32%) Security Analyst
3 58 (18.18%) Information Analyst
3 58 (18.18%) Information Security Analyst
3 58 (18.18%) Security Manager
4 45 (14.11%) Information Manager
5 44 (13.79%) Risk Manager
6 41 (12.85%) Consultant
6 41 (12.85%) Information Security Manager
7 34 (10.66%) Security Consultant
8 24 (7.52%) IT Analyst
9 21 (6.58%) Risk Analyst
9 21 (6.58%) Security Specialist
10 18 (5.64%) Information Risk Manager
11 17 (5.33%) CISSP Manager
11 17 (5.33%) Information Security Specialist
11 17 (5.33%) Information Specialist
11 17 (5.33%) IT Engineer
12 16 (5.02%) IT Manager
13 15 (4.70%) IT Risk Analyst
Libraries, Frameworks & Software Standards
1 19 (5.96%) MSMQ
1 19 (5.96%) WebSphere MQ
2 3 (0.94%) .NET
3 1 (0.31%) SailPoint
3 1 (0.31%) Web Services
Miscellaneous
1 98 (30.72%) Management Information System
2 30 (9.40%) Analytical Skills
3 14 (4.39%) Security Operations Centre
4 11 (3.45%) Distributed Denial-of-Service
4 11 (3.45%) Greenfield Project
5 9 (2.82%) CESG
5 9 (2.82%) Cyberthreat
6 7 (2.19%) Data Protection Act
7 6 (1.88%) Internet of Things
8 5 (1.57%) FMCG
8 5 (1.57%) PKI
9 4 (1.25%) Computer Science
9 4 (1.25%) Cyber Attack
9 4 (1.25%) Data Centre
10 3 (0.94%) BYOD
10 3 (0.94%) Fintech
10 3 (0.94%) Taxonomies
11 2 (0.63%) Hybrid Cloud
11 2 (0.63%) Mobile Computing
11 2 (0.63%) Virtual Team
Operating Systems
1 23 (7.21%) Linux
1 23 (7.21%) Windows
2 21 (6.58%) Windows Server
3 19 (5.96%) Unix
4 3 (0.94%) Android
4 3 (0.94%) Apple iOS
Processes & Methodologies
1 239 (74.92%) Information Security
2 101 (31.66%) Risk Management
3 94 (29.47%) Cybersecurity
4 87 (27.27%) ITIL
5 82 (25.71%) Security Management
6 74 (23.20%) Information Security Management
7 63 (19.75%) Risk Assessment
8 53 (16.61%) Data Protection
8 53 (16.61%) Risk Analysis
9 52 (16.30%) Penetration Testing
10 45 (14.11%) Security Operations
11 39 (12.23%) ISMS
12 34 (10.66%) Internal Audit
12 34 (10.66%) IT Audit
13 33 (10.34%) Information Security Governance
13 33 (10.34%) Stakeholder Management
14 31 (9.72%) IT Governance
15 28 (8.78%) Process Improvement
15 28 (8.78%) Project Management
15 28 (8.78%) Strategic Planning
Programming Languages
1 19 (5.96%) SQL
2 11 (3.45%) C
3 6 (1.88%) Java
4 4 (1.25%) C#
5 3 (0.94%) C++
5 3 (0.94%) Perl
5 3 (0.94%) Python
Qualifications
1 295 (92.48%) CISSP
2 277 (86.83%) CISM
3 171 (53.61%) CISA
4 62 (19.44%) Degree
5 51 (15.99%) SANS
6 45 (14.11%) GIAC
7 25 (7.84%) CEH
8 22 (6.90%) CGEIT
9 15 (4.70%) CESG Certified Professional
10 12 (3.76%) Cisco Certification
10 12 (3.76%) CISMP
11 9 (2.82%) (ISC)2 CCSP
11 9 (2.82%) ISO 27001 Lead Auditor
12 6 (1.88%) ISSMP
12 6 (1.88%) Master's Degree
12 6 (1.88%) Security Cleared
12 6 (1.88%) SSCP
13 5 (1.57%) MBA
13 5 (1.57%) SC Cleared
14 4 (1.25%) ISO 27001 Lead Implementer
Quality Assurance & Compliance
1 160 (50.16%) ISO/IEC 27001
2 70 (21.94%) GDPR
3 65 (20.38%) COBIT
4 47 (14.73%) PCI DSS
5 21 (6.58%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
6 16 (5.02%) Cyber Essentials
7 12 (3.76%) Sarbanes-Oxley
8 10 (3.13%) ISO 22301
8 10 (3.13%) ISO 9001
9 9 (2.82%) ISO 14001
10 8 (2.51%) HIPAA
11 7 (2.19%) COSO
12 4 (1.25%) Cyber Essentials PLUS
12 4 (1.25%) ISO 31000
13 2 (0.63%) ISO/IEC 20000
13 2 (0.63%) SLA
14 1 (0.31%) Data Quality
14 1 (0.31%) HMG Security Policy Framework
14 1 (0.31%) ISO/IEC 27005
14 1 (0.31%) NIST 800
System Software
1 40 (12.54%) Active Directory
Systems Management
1 6 (1.88%) RSA Archer
2 2 (0.63%) Backup Exec
3 1 (0.31%) HP Fortify
3 1 (0.31%) WebInspect
Vendors
1 10 (3.13%) SAP
2 8 (2.51%) Microsoft
2 8 (2.51%) Splunk
3 6 (1.88%) CyberArk
4 4 (1.25%) Cisco
5 2 (0.63%) CheckPoint
5 2 (0.63%) Sophos
6 1 (0.31%) Google
6 1 (0.31%) HP
6 1 (0.31%) IBM
6 1 (0.31%) NetIQ
6 1 (0.31%) Qualys
6 1 (0.31%) Veracode