HMG Security Policy Framework Job Trends

HMG Security Policy Framework (SPF)
UK

The table below provides summary statistics and salary benchmarking for jobs requiring HMG Security Policy Framework skills. It covers permanent job vacancies from the 6 months leading up to 3 September 2026, with comparisons to the same periods in the previous two years.

6 months to
3 Sep 2026
Same period 2025 Same period 2024
Rank 751 670 787
Rank change year-on-year -81 +117 -23
Permanent jobs citing HMG Security Policy Framework 40 16 23
As % of all permanent jobs in the UK 0.036% 0.032% 0.028%
As % of the Quality Assurance & Compliance category 0.34% 0.21% 0.21%
Number of salaries quoted 26 16 20
10th Percentile £48,363 - £48,008
25th Percentile £50,468 £63,750 £65,313
Median annual salary (50th Percentile) £75,000 £67,500 £70,000
Median % change year-on-year +11.11% -3.57% -6.67%
75th Percentile - £71,250 £71,875
90th Percentile - - £90,250
UK excluding London median annual salary £53,171 £67,500 £70,000
% change year-on-year -21.23% -3.57% +12.45%

All Quality Assurance and Compliance Skills
UK

HMG Security Policy Framework falls under the Quality Assurance and Compliance category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring quality assurance or compliance skills.

Permanent vacancies with a requirement for quality assurance or compliance skills 11,653 7,716 10,738
As % of all permanent jobs advertised in the UK 10.59% 15.51% 13.27%
Number of salaries quoted 7,349 4,317 6,034
10th Percentile £31,250 £30,000 £28,280
25th Percentile £41,250 £40,000 £40,000
Median annual salary (50th Percentile) £57,500 £57,500 £55,000
Median % change year-on-year - +4.55% -8.33%
75th Percentile £75,250 £75,000 £75,000
90th Percentile £95,000 £92,500 £95,000
UK excluding London median annual salary £50,000 £50,000 £49,274
% change year-on-year - +1.47% -5.24%

HMG Security Policy Framework
Job Vacancy Trend

Historical trend showing the proportion of permanent IT job postings citing HMG Security Policy Framework relative to all permanent IT jobs advertised.

HMG Security Policy Framework job vacancy trend in the UK

HMG Security Policy Framework
Salary Trend

Salary distribution trend for jobs in the UK citing HMG Security Policy Framework.

Salary distribution trend for jobs in the UK citing HMG Security Policy Framework

HMG Security Policy Framework
Salary Histogram

Salary distribution for jobs citing HMG Security Policy Framework over the 6 months to 3 September 2026.

Salary histogram for HMG Security Policy Framework in the UK

HMG Security Policy Framework
Top 7 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing HMG Security Policy Framework within the UK over the 6 months to 3 September 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
Work from Home -13 32 £75,000 +11.11% 14
England -83 26 £75,000 +11.11% 20
London - 22 £75,000 - 7
UK excluding London -104 13 £53,171 -21.23% 15
Wales - 9 £53,171 -
South East - 3 £70,000 - 5
South West -89 1 - - 4

HMG Security Policy Framework
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Applications
1 1 (2.50%) Microsoft Office
Business Applications
1 4 (10.00%) Dynamics CRM
Cloud Services
1 30 (75.00%) Azure
2 21 (52.50%) AWS
3 17 (42.50%) GCP
4 9 (22.50%) Azure DevOps
5 4 (10.00%) Azure Functions
5 4 (10.00%) Azure Logic Apps
5 4 (10.00%) Azure Service Bus
5 4 (10.00%) Power Automate
5 4 (10.00%) Power Platform
5 4 (10.00%) PowerApps
5 4 (10.00%) Serverless
6 1 (2.50%) Azure Sentinel
6 1 (2.50%) Slack
Communications & Networking
1 19 (47.50%) Network Security
2 5 (12.50%) Firewall
3 3 (7.50%) Intrusion Detection
Development Applications
1 5 (12.50%) Git
General
1 21 (52.50%) Public Sector
2 16 (40.00%) Inclusion and Diversity
2 16 (40.00%) Law
3 9 (22.50%) Social Skills
4 8 (20.00%) Influencing Skills
4 8 (20.00%) Legal
5 7 (17.50%) Finance
6 2 (5.00%) Police
7 1 (2.50%) Analytical Skills
Job Titles
1 17 (42.50%) Architect
1 17 (42.50%) Security Architect
2 13 (32.50%) Senior
3 9 (22.50%) Developer
4 7 (17.50%) Senior Developer
4 7 (17.50%) SEO Developer
5 5 (12.50%) Front-End Developer (Client-Side Developer)
6 4 (10.00%) Consultant
6 4 (10.00%) Cybersecurity Consultant
6 4 (10.00%) Security Consultant
6 4 (10.00%) Security Manager
7 3 (7.50%) Cybersecurity Manager
7 3 (7.50%) Senior Front-End Developer
7 3 (7.50%) Senior Manager
8 2 (5.00%) Lead
8 2 (5.00%) Lead Consultant
8 2 (5.00%) Lead Security Consultant
8 2 (5.00%) Security Engineer
8 2 (5.00%) Senior Cybersecurity Consultant
8 2 (5.00%) Senior Security Consultant
Libraries, Frameworks & Software Standards
1 5 (12.50%) Next.js
1 5 (12.50%) Node.js
1 5 (12.50%) React
1 5 (12.50%) RESTful
1 5 (12.50%) Web Services
2 4 (10.00%) HTML5 Canvas
Miscellaneous
1 4 (10.00%) Blog
2 3 (7.50%) Management Information System
2 3 (7.50%) Security Posture
3 2 (5.00%) CESG
3 2 (5.00%) PKI
3 2 (5.00%) Self-Motivation
4 1 (2.50%) Onboarding
4 1 (2.50%) Social Media
Processes & Methodologies
1 30 (75.00%) Agile
2 25 (62.50%) SABSA
2 25 (62.50%) TOGAF
3 21 (52.50%) Cloud Security
3 21 (52.50%) Risk Analysis
4 20 (50.00%) Security Architecture
5 18 (45.00%) Stakeholder Engagement
6 17 (42.50%) Community of Practice
7 16 (40.00%) Architectural Patterns
7 16 (40.00%) Identity Access Management
7 16 (40.00%) OWASP
7 16 (40.00%) Risk Assessment
7 16 (40.00%) Technology Strategy
7 16 (40.00%) Threat Modelling
8 11 (27.50%) Cybersecurity
8 11 (27.50%) Scrum
9 10 (25.00%) Continuous Improvement
10 9 (22.50%) Information Security
10 9 (22.50%) Microservices
10 9 (22.50%) SOA
Programming Languages
1 4 (10.00%) C#
1 4 (10.00%) JavaScript
1 4 (10.00%) Python
1 4 (10.00%) TypeScript
2 1 (2.50%) Objective-C
Qualifications
1 29 (72.50%) Security Cleared
2 24 (60.00%) CISSP
3 23 (57.50%) SC Cleared
4 21 (52.50%) Degree
5 19 (47.50%) CISM
6 4 (10.00%) CISMP
6 4 (10.00%) CREST Certified
6 4 (10.00%) ISO 27001 Lead Auditor
6 4 (10.00%) ISO 27001 Lead Implementer
7 3 (7.50%) CRISC
7 3 (7.50%) DV Cleared
7 3 (7.50%) GSEC
8 2 (5.00%) (ISC)2 CCSP
8 2 (5.00%) Cisco Certification
8 2 (5.00%) CompTIA Security+
9 1 (2.50%) CASP
9 1 (2.50%) CESG Certified Professional
9 1 (2.50%) ISSAP
9 1 (2.50%) Master's Degree
9 1 (2.50%) SSCP
Quality Assurance & Compliance
1 37 (92.50%) ISO/IEC 27001
2 25 (62.50%) NIST
3 20 (50.00%) NCSC
4 6 (15.00%) JSP 440
5 3 (7.50%) Government Security Classifications
6 2 (5.00%) GRC
7 1 (2.50%) COBIT
7 1 (2.50%) Def Stans
7 1 (2.50%) NIST 800
7 1 (2.50%) PCI DSS
7 1 (2.50%) Sarbanes-Oxley
Vendors
1 9 (22.50%) Microsoft
2 4 (10.00%) Google
3 1 (2.50%) EMC
3 1 (2.50%) Splunk