Period
to 9 July 2020

The following table provides summary statistics for permanent job vacancies with a requirement for Cyber Essentials skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Cyber Essentials over the 6 months to 9 July 2020 with a comparison to the same period in the previous 2 years.

Cyber Essentials
UK
6 months to
9 Jul 2020
Same period 2019 Same period 2018
Rank 623 747 826
Rank change year-on-year +124 +79 +104
Permanent jobs citing Cyber Essentials 220 388 387
As % of all permanent jobs advertised in the UK 0.28% 0.26% 0.22%
As % of the Quality Assurance & Compliance category 2.31% 1.93% 1.68%
Number of salaries quoted 203 324 301
Median annual salary £51,000 £50,000 £57,500
Median salary % change year-on-year +2.00% -13.04% -
10th Percentile £31,250 £32,500 £37,500
90th Percentile £78,950 £80,000 £87,500
UK excluding London median annual salary £50,000 £45,000 £57,500
% change year-on-year +11.11% -21.74% +15.00%

Cyber Essentials is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for quality assurance or compliance skills.

All Quality Assurance and Compliance Skills
UK
Permanent vacancies with a requirement for quality assurance or compliance skills 9,506 20,142 23,001
As % of all permanent IT jobs advertised in the UK 12.20% 13.68% 12.95%
Number of salaries quoted 7,243 14,778 17,621
Median annual salary £52,500 £50,000 £50,000
Median salary % change year-on-year +5.00% - +5.26%
10th Percentile £30,000 £28,000 £28,000
90th Percentile £85,000 £83,750 £80,000
UK excluding London median annual salary £47,500 £45,000 £45,000
% change year-on-year +5.56% - +8.43%

Cyber Essentials
Job Vacancy Trend

Job postings citing Cyber Essentials as a proportion of all IT jobs advertised.

Job vacancy trend for Cyber Essentials in the UK

Cyber Essentials
Salary Trend

3-month moving average salary quoted in jobs citing Cyber Essentials.

Salary trend for Cyber Essentials in the UK

Cyber Essentials
Salary Histogram

Salary distribution for jobs citing Cyber Essentials over the 6 months to 9 July 2020.

Salary histogram for Cyber Essentials in the UK

Cyber Essentials
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Cyber Essentials within the UK over the 6 months to 9 July 2020. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +94 199 £51,000 -2.86% 7
UK excluding London +157 127 £50,000 +11.11% 14
London +104 76 £55,069 -11.89% 3
South East +120 43 £50,000 +24.22%
North of England +95 25 £47,500 - 1
Midlands +92 25 £62,500 +19.05%
Work from Home +66 21 £47,500 -26.92% 3
East of England +97 18 £51,000 +45.71%
West Midlands +93 16 £65,000 +15.56%
North West +84 13 £46,750 -1.45% 1
South West +93 12 £47,713 +12.26% 3
Yorkshire +80 9 £47,500 -9.52%
East Midlands +68 9 £50,000 +27.28%
Scotland +83 3 £25,500 -32.00% 8
North East +27 3 £38,375 +0.99%
Wales +16 1 £37,500 -16.67% 2

For the 6 months to 9 July 2020, IT jobs citing Cyber Essentials also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for Cyber Essentials.

1 182 (82.73%) ISO/IEC 27001
2 152 (69.09%) Information Security
3 127 (57.73%) Cybersecurity
4 88 (40.00%) CISSP
5 84 (38.18%) Firewall
6 83 (37.73%) PCI DSS
7 76 (34.55%) CISM
8 74 (33.64%) GDPR
9 72 (32.73%) Risk Management
10 60 (27.27%) Windows
11 52 (23.64%) Finance
12 50 (22.73%) Security Cleared
13 44 (20.00%) Penetration Testing
14 43 (19.55%) Cyber Essentials PLUS
15 40 (18.18%) Data Protection
15 40 (18.18%) ISMS
16 39 (17.73%) Legal
17 38 (17.27%) Active Directory
17 38 (17.27%) SC Cleared
17 38 (17.27%) Office 365
18 37 (16.82%) Microsoft
19 36 (16.36%) Management Information System
20 35 (15.91%) NIST
21 34 (15.45%) Security Management
21 34 (15.45%) Linux
22 33 (15.00%) Azure
23 32 (14.55%) Infrastructure Engineering
23 32 (14.55%) Information Security Management
24 31 (14.09%) SIEM
25 30 (13.64%) Cyberthreat

Cyber Essentials
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 12 (5.45%) SharePoint
2 5 (2.27%) MS Exchange
3 3 (1.36%) Skype for Business
4 2 (0.91%) IIS
4 2 (0.91%) nginx
4 2 (0.91%) Tomcat
5 1 (0.45%) OpenStack
Applications
1 6 (2.73%) Microsoft Office
2 1 (0.45%) Microsoft Excel
2 1 (0.45%) Microsoft PowerPoint
Business Applications
1 2 (0.91%) Sentinel
Cloud Services
1 38 (17.27%) Office 365
2 33 (15.00%) Azure
3 23 (10.45%) SaaS
4 15 (6.82%) AWS
5 10 (4.55%) PaaS
6 8 (3.64%) Azure Active Directory
7 7 (3.18%) IaaS
8 3 (1.36%) Mimecast
9 1 (0.45%) Cloud Computing
9 1 (0.45%) Dynamics 365
9 1 (0.45%) OneDrive
Communications & Networking
1 84 (38.18%) Firewall
2 25 (11.36%) DNS
3 24 (10.91%) VPN
4 17 (7.73%) DHCP
4 17 (7.73%) LAN
5 16 (7.27%) TCP/IP
6 15 (6.82%) WAN
7 14 (6.36%) Cisco ASA
7 14 (6.36%) Intrusion Detection
8 12 (5.45%) Broadband
9 11 (5.00%) SAN
10 8 (3.64%) NAS
10 8 (3.64%) SMTP
10 8 (3.64%) SNMP
10 8 (3.64%) Wireshark
11 7 (3.18%) Unified Communications
11 7 (3.18%) Wireless
11 7 (3.18%) WLAN
12 5 (2.27%) IPsec
12 5 (2.27%) Wi-Fi
Database & Business Intelligence
1 4 (1.82%) Electronic Patient Records
2 3 (1.36%) SQL Server
3 2 (0.91%) MariaDB
4 1 (0.45%) Amazon RDS
4 1 (0.45%) SQL Server 2012
4 1 (0.45%) SQL Server 2014
4 1 (0.45%) SQL Server 2017
Development Applications
1 7 (3.18%) WinDbg
2 2 (0.91%) Metasploit
General
1 52 (23.64%) Finance
2 39 (17.73%) Legal
3 18 (8.18%) Law
4 16 (7.27%) Manufacturing
5 14 (6.36%) Marketing
6 12 (5.45%) Public Sector
7 5 (2.27%) Banking
8 4 (1.82%) Retail
9 2 (0.91%) Advertising
10 1 (0.45%) Aerospace
10 1 (0.45%) Local Government
10 1 (0.45%) Pharmaceutical
10 1 (0.45%) Telecoms
Job Titles
1 40 (18.18%) Security Manager
2 31 (14.09%) Infrastructure Engineer
3 30 (13.64%) Analyst
4 29 (13.18%) IT Manager
5 24 (10.91%) IT Security Manager
5 24 (10.91%) Security Analyst
6 21 (9.55%) Consultant
6 21 (9.55%) Security Engineer
7 18 (8.18%) Infrastructure Security Engineer
8 17 (7.73%) Security Consultant
9 15 (6.82%) Security Specialist
10 14 (6.36%) Information Manager
10 14 (6.36%) Security Officer
11 13 (5.91%) Cybersecurity Consultant
12 12 (5.45%) Information Security Manager
13 11 (5.00%) Head of Security
13 11 (5.00%) Information Security Officer
14 10 (4.55%) Head of Information
14 10 (4.55%) Head of Information Security
15 9 (4.09%) Information Security Analyst
Libraries, Frameworks & Software Standards
1 2 (0.91%) ModSecurity
2 1 (0.45%) AngularJS
2 1 (0.45%) HTML
2 1 (0.45%) Node.js
2 1 (0.45%) Web Services
Miscellaneous
1 36 (16.36%) Management Information System
2 30 (13.64%) Cyberthreat
3 16 (7.27%) Data Centre
4 14 (6.36%) Self-Motivation
5 13 (5.91%) Analytical Skills
5 13 (5.91%) Handset
6 12 (5.45%) Blog
6 12 (5.45%) Data Protection Act
7 11 (5.00%) Cyberattack
8 6 (2.73%) Enterprise Storage
9 5 (2.27%) NHS
10 4 (1.82%) PACS
10 4 (1.82%) Public Cloud
10 4 (1.82%) Renewable Energy
10 4 (1.82%) Replication
11 3 (1.36%) PKI
11 3 (1.36%) Security Operations Centre
12 2 (0.91%) Distributed Denial-of-Service
12 2 (0.91%) Greenfield Project
13 1 (0.45%) Enterprise Cloud
Operating Systems
1 60 (27.27%) Windows
2 34 (15.45%) Linux
3 30 (13.64%) Windows Server
4 14 (6.36%) Windows Server 2012
5 9 (4.09%) Mac OS
6 4 (1.82%) Unix
6 4 (1.82%) Windows 10
7 3 (1.36%) Windows Server 2008
7 3 (1.36%) Windows Server 2016
8 2 (0.91%) Android
8 2 (0.91%) Apple iOS
9 1 (0.45%) CentOS
9 1 (0.45%) Red Hat Enterprise Linux
9 1 (0.45%) Solaris
9 1 (0.45%) Windows Server 2019
Processes & Methodologies
1 152 (69.09%) Information Security
2 127 (57.73%) Cybersecurity
3 72 (32.73%) Risk Management
4 44 (20.00%) Penetration Testing
5 40 (18.18%) Data Protection
5 40 (18.18%) ISMS
6 34 (15.45%) Security Management
7 32 (14.55%) Information Security Management
7 32 (14.55%) Infrastructure Engineering
8 31 (14.09%) SIEM
9 26 (11.82%) Continuous Improvement
9 26 (11.82%) Data Privacy
10 25 (11.36%) ITIL
11 21 (9.55%) Information Assurance
12 20 (9.09%) Vulnerability Management
13 19 (8.64%) Business Continuity
14 18 (8.18%) Security Architecture
15 17 (7.73%) Security Testing
16 16 (7.27%) BCP
16 16 (7.27%) Data Security
Programming Languages
1 14 (6.36%) PowerShell
2 8 (3.64%) VBScript
3 4 (1.82%) SQL
4 1 (0.45%) C
4 1 (0.45%) C++
4 1 (0.45%) JavaScript
4 1 (0.45%) PHP
Qualifications
1 88 (40.00%) CISSP
2 76 (34.55%) CISM
3 50 (22.73%) Security Cleared
4 38 (17.27%) SC Cleared
5 29 (13.18%) CRISC
6 28 (12.73%) CISA
7 23 (10.45%) Degree
8 21 (9.55%) CESG Certified Professional
9 18 (8.18%) CEH
10 17 (7.73%) DBS Check
11 11 (5.00%) CREST Certified
12 9 (4.09%) Cisco Certification
12 9 (4.09%) OSCP
13 7 (3.18%) (ISC)2 CCSP
13 7 (3.18%) DV Cleared
13 7 (3.18%) ISO 27001 Lead Auditor
14 6 (2.73%) CISMP
15 5 (2.27%) CCSP
15 5 (2.27%) IISP
16 4 (1.82%) SANS
Quality Assurance & Compliance
1 182 (82.73%) ISO/IEC 27001
2 83 (37.73%) PCI DSS
3 74 (33.64%) GDPR
4 43 (19.55%) Cyber Essentials PLUS
5 35 (15.91%) NIST
6 22 (10.00%) COBIT
7 21 (9.55%) RMADS
8 20 (9.09%) JSP 440
9 17 (7.73%) NCSC
10 14 (6.36%) SLA
11 12 (5.45%) ISO 22301
12 11 (5.00%) ISO 9001
13 8 (3.64%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
14 7 (3.18%) HMG Security Policy Framework
14 7 (3.18%) ISO 31000
14 7 (3.18%) ISO/IEC 27005
15 6 (2.73%) Sarbanes-Oxley
16 3 (1.36%) Government Security Classifications
17 2 (0.91%) NIST 800
18 1 (0.45%) IASME
System Software
1 38 (17.27%) Active Directory
2 16 (7.27%) VMware Infrastructure
3 10 (4.55%) Hyper-V
4 2 (0.91%) Docker
4 2 (0.91%) Virtual Servers
5 1 (0.45%) VMware ESXi
5 1 (0.45%) vSphere
Systems Management
1 8 (3.64%) Computer Emergency Response Teams
2 6 (2.73%) Host Intrusion Detection System
3 2 (0.91%) Ansible
3 2 (0.91%) Kubernetes
3 2 (0.91%) QRadar
3 2 (0.91%) Terraform
4 1 (0.45%) Computer Incident Response Team
4 1 (0.45%) FortiGate
4 1 (0.45%) Malwarebytes
4 1 (0.45%) Nessus
4 1 (0.45%) Network Intrusion Detection System
4 1 (0.45%) SCCM
4 1 (0.45%) SolarWinds Orion
4 1 (0.45%) WSUS
Vendors
1 37 (16.82%) Microsoft
2 26 (11.82%) Cisco
3 16 (7.27%) VMware
4 15 (6.82%) AlienVault
4 15 (6.82%) HP
5 11 (5.00%) Splunk
6 9 (4.09%) LogRhythm
7 8 (3.64%) SolarWinds
8 7 (3.18%) Dell
8 7 (3.18%) Juniper
8 7 (3.18%) Qualys
9 6 (2.73%) CheckPoint
9 6 (2.73%) Citrix
9 6 (2.73%) Forcepoint
9 6 (2.73%) NetApp
10 5 (2.27%) Avaya
10 5 (2.27%) McAfee
10 5 (2.27%) Oracle
10 5 (2.27%) Trustwave
11 4 (1.82%) Freshdesk