ISACA Certified in Risk and Information Systems Control (CRISC)
UK

The table below provides summary statistics for permanent job vacancies with a requirement for CRISC qualifications. It includes a benchmarking guide to the salaries offered over the 6 months leading up to 28 May 2025, comparing them to the same period in the previous two years.

6 months to
28 May 2025
Same period 2024 Same period 2023
Rank 577 703 765
Rank change year-on-year +126 +62 +183
Permanent jobs citing CRISC 136 209 199
As % of all permanent jobs advertised in the UK 0.25% 0.20% 0.20%
As % of the Qualifications category 0.51% 0.76% 0.61%
Number of salaries quoted 56 166 172
10th Percentile £51,875 £37,500 £46,250
25th Percentile £63,688 £56,250 £54,688
Median annual salary (50th Percentile) £75,000 £68,500 £70,000
Median % change year-on-year +9.49% -2.14% +7.69%
75th Percentile £83,750 £85,000 £82,563
90th Percentile £99,375 £105,000 £102,000
UK excluding London median annual salary £65,000 £65,000 £56,000
% change year-on-year - +16.07% -6.67%

All Academic and Professional Certifications
UK

CRISC falls under the Academic Qualifications and Professional Certifications category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring academic qualifications or professional certifications.

Permanent vacancies requiring academic qualifications or professional certifications 26,899 27,630 32,541
As % of all permanent jobs advertised in the UK 49.19% 27.05% 33.23%
Number of salaries quoted 10,865 17,234 14,697
10th Percentile £31,750 £28,500 £31,973
25th Percentile £43,750 £38,501 £42,250
Median annual salary (50th Percentile) £55,000 £54,000 £60,000
Median % change year-on-year +1.85% -10.00% +9.09%
75th Percentile £68,568 £71,000 £77,500
90th Percentile £82,500 £87,500 £95,000
UK excluding London median annual salary £52,500 £50,000 £52,500
% change year-on-year +5.00% -4.76% +5.00%

CRISC
Job Vacancy Trend

Job postings citing CRISC as a proportion of all IT jobs advertised.

Job vacancy trend for CRISC in the UK

CRISC
Salary Trend

3-month moving average salary quoted in jobs citing CRISC.

Salary trend for CRISC in the UK

CRISC
Salary Histogram

Salary distribution for jobs citing CRISC over the 6 months to 28 May 2025.

Salary histogram for CRISC in the UK

CRISC
Top 14 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CRISC within the UK over the 6 months to 28 May 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +71 115 £75,000 +9.49% 163
UK excluding London +133 78 £65,000 - 133
London +114 58 £75,000 -6.25% 54
South East +95 29 £71,250 +50.00% 42
Work from Home +77 24 £75,000 +57.89% 35
North of England +30 20 £65,000 +62.50% 32
North West -3 20 £65,000 +62.50% 18
Scotland +141 18 £55,000 - 13
West Midlands +57 6 £55,943 -3.55% 12
Midlands +51 6 £55,943 -9.04% 21
Channel Islands +1 2 £78,750 -21.25%
South West +65 1 £52,500 -23.36% 13
East of England +31 1 £51,422 -20.89% 15
Wales - 1 £55,000 - 2

CRISC
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 3 (2.21%) CMS
2 2 (1.47%) SharePoint
3 1 (0.74%) Microsoft Exchange
3 1 (0.74%) Oracle Workflow
Applications
1 3 (2.21%) Microsoft Office
2 2 (1.47%) Microsoft Excel
3 1 (0.74%) Microsoft PowerPoint
3 1 (0.74%) MS Visio
Cloud Services
1 7 (5.15%) AWS
2 6 (4.41%) Azure
3 3 (2.21%) Cloud Computing
3 3 (2.21%) IaaS
3 3 (2.21%) SaaS
4 2 (1.47%) GCP
4 2 (1.47%) Microsoft 365
5 1 (0.74%) Power Automate
5 1 (0.74%) Power Platform
5 1 (0.74%) Snowflake
Communications & Networking
1 5 (3.68%) Network Security
2 1 (0.74%) Intranet
Database & Business Intelligence
1 1 (0.74%) Hadoop
1 1 (0.74%) HBase
1 1 (0.74%) NoSQL
1 1 (0.74%) Power BI
Development Applications
1 1 (0.74%) Subversion
General
1 63 (46.32%) Finance
2 51 (37.50%) Social Skills
3 30 (22.06%) Legal
4 17 (12.50%) Analytical Skills
4 17 (12.50%) Banking
5 16 (11.76%) Presentation Skills
6 4 (2.94%) Inclusion and Diversity
6 4 (2.94%) Public Sector
7 3 (2.21%) Law
7 3 (2.21%) Organisational Skills
7 3 (2.21%) Retail Banking
8 2 (1.47%) Influencing Skills
9 1 (0.74%) Retail
Job Titles
1 36 (26.47%) Risk Manager
2 24 (17.65%) Analyst
3 19 (13.97%) Technology Risk Manager
4 12 (8.82%) Security Manager
5 10 (7.35%) Information Manager
5 10 (7.35%) Information Security Manager
5 10 (7.35%) Security Analyst
5 10 (7.35%) Senior
6 7 (5.15%) Information Officer
6 7 (5.15%) Risk Officer
6 7 (5.15%) Senior Analyst
7 6 (4.41%) IT Manager
7 6 (4.41%) IT Risk Manager
7 6 (4.41%) Risk Analyst
8 5 (3.68%) Architect
8 5 (3.68%) Compliance Advisor
8 5 (3.68%) Consultant
8 5 (3.68%) Security Architect
9 4 (2.94%) Senior Risk Analyst
9 4 (2.94%) Threat Intelligence Analyst
Miscellaneous
1 34 (25.00%) Management Information System
2 13 (9.56%) Security Posture
3 10 (7.35%) Self-Motivation
4 8 (5.88%) Data Protection Act
5 7 (5.15%) Taxonomies
6 4 (2.94%) Security Operations Centre
7 3 (2.21%) Analytical Mindset
7 3 (2.21%) Cyber Threat
7 3 (2.21%) Online Banking
8 2 (1.47%) Hybrid Cloud
8 2 (1.47%) Public Cloud
9 1 (0.74%) Foreign Exchange (FX)
9 1 (0.74%) Industrial Internet of Things
Operating Systems
1 1 (0.74%) Linux
1 1 (0.74%) Windows
Processes & Methodologies
1 114 (83.82%) Risk Management
2 96 (70.59%) Information Security
3 70 (51.47%) Stakeholder Management
4 66 (48.53%) Cybersecurity
5 56 (41.18%) Continuous Improvement
6 53 (38.97%) Coaching
7 37 (27.21%) Decision-Making
8 30 (22.06%) Stakeholder Engagement
9 28 (20.59%) Agile
10 26 (19.12%) OWASP
10 26 (19.12%) Risk Assessment
10 26 (19.12%) Vulnerability Management
11 24 (17.65%) Mentoring
12 23 (16.91%) Due Diligence
12 23 (16.91%) Quantitative Risk Management
13 21 (15.44%) Creative Thinking
14 19 (13.97%) Regulatory Compliance
14 19 (13.97%) Security Operations
15 18 (13.24%) Contingency Planning
16 17 (12.50%) Internal Audit
Programming Languages
1 6 (4.41%) R
2 2 (1.47%) Kusto Query Language
2 2 (1.47%) PowerShell
3 1 (0.74%) C#
3 1 (0.74%) C++
3 1 (0.74%) Java
3 1 (0.74%) Python
3 1 (0.74%) VBA
Qualifications
1 82 (60.29%) CISM
2 77 (56.62%) CISSP
3 39 (28.68%) Degree
4 25 (18.38%) CISA
5 10 (7.35%) Master's Degree
6 6 (4.41%) ISO 27001 Lead Auditor
6 6 (4.41%) SANS
7 4 (2.94%) ISO 27001 Lead Implementer
8 3 (2.21%) CompTIA Security+
8 3 (2.21%) ISACA
9 2 (1.47%) CEH
9 2 (1.47%) DBS Check
9 2 (1.47%) FFIEC
9 2 (1.47%) GCIH
9 2 (1.47%) GIAC
9 2 (1.47%) GISF
9 2 (1.47%) SSCP
10 1 (0.74%) CCSP
10 1 (0.74%) Cisco Certification
10 1 (0.74%) PMP
Quality Assurance & Compliance
1 61 (44.85%) ISO/IEC 27001
2 59 (43.38%) NIST
3 48 (35.29%) COBIT
4 41 (30.15%) GRC
5 24 (17.65%) ITGC
6 23 (16.91%) SOC 2
7 21 (15.44%) Sarbanes-Oxley
8 17 (12.50%) Cyber Essentials
9 12 (8.82%) GDPR
10 11 (8.09%) NIST 800
11 10 (7.35%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
11 10 (7.35%) PCI DSS
12 9 (6.62%) Cyber Essentials PLUS
13 7 (5.15%) SOC 1
14 2 (1.47%) Accessibility
14 2 (1.47%) Actionable Recommendations
14 2 (1.47%) NCSC
15 1 (0.74%) California Consumer Privacy Act
15 1 (0.74%) Data Quality
15 1 (0.74%) ISO/IEC 27005
System Software
1 1 (0.74%) Docker
1 1 (0.74%) HDFS
Systems Management
1 8 (5.88%) RSA Archer
2 1 (0.74%) Computer Emergency Response Teams
Vendors
1 7 (5.15%) Microsoft
2 1 (0.74%) Fortinet
2 1 (0.74%) Google
2 1 (0.74%) Oracle
2 1 (0.74%) Sybase
2 1 (0.74%) VMware