Period
to 19 February 2020

The following table provides summary statistics for permanent job vacancies with a requirement for HMG Security Policy Framework skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited HMG Security Policy Framework over the 6 months to 19 February 2020 with a comparison to the same period in the previous 2 years.

HMG Security Policy Framework (SPF)
UK
6 months to
19 Feb 2020
Same period 2019 Same period 2018
Rank 861 1039 1111
Rank change year-on-year +178 +72 +6
Permanent jobs citing HMG Security Policy Framework 146 88 94
As % of all permanent IT jobs advertised in the UK 0.12% 0.058% 0.054%
As % of the Quality Assurance & Compliance category 0.94% 0.42% 0.42%
Number of salaries quoted 109 52 81
UK median annual salary £67,500 £62,500 £67,500
Median salary % change year-on-year +8.00% -7.41% +50.00%
10th Percentile £42,050 £39,733 £45,000
90th Percentile £85,000 £77,500 £90,000
UK excluding London median annual salary £65,000 £65,000 £65,000

HMG Security Policy Framework is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for quality assurance or compliance skills.

All Quality Assurance and Compliance Skills
UK
Permanent vacancies with a requirement for quality assurance or compliance skills 15,500 21,087 22,356
As % of all permanent IT jobs advertised in the UK 12.49% 13.92% 12.73%
Number of salaries quoted 11,951 15,437 17,376
UK median annual salary £52,500 £50,000 £50,000
Median salary % change year-on-year +5.00% - +5.26%
10th Percentile £28,500 £27,500 £27,500
90th Percentile £84,000 £80,000 £80,000
UK excluding London median annual salary £45,000 £45,000 £43,000
% change year-on-year - +4.65% +1.18%

HMG Security Policy Framework
Job Vacancy Trend

Job postings citing HMG Security Policy Framework as a percentage of all IT jobs advertised.

Job vacancy trend for HMG Security Policy Framework in the UK

HMG Security Policy Framework
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing HMG Security Policy Framework.

Salary trend for HMG Security Policy Framework in the UK

HMG Security Policy Framework
Salary Histogram

The salary distribution of IT jobs citing HMG Security Policy Framework over the 6 months to 19 February 2020.

Salary histogram for HMG Security Policy Framework in the UK

HMG Security Policy Framework
Top 14 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing HMG Security Policy Framework within the UK over the 6 months to 19 February 2020. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +164 117 £63,500 -2.31% 11
UK excluding London +103 89 £65,000 - 10
South East +58 39 £70,000 +7.69% 2
South West +32 30 £66,250 +1.92% 2
London +113 26 £60,000 +39.59% 6
Midlands +39 7 £55,000 +35.80%
East of England +69 5 £57,500 - 1
West Midlands +37 5 £57,500 +41.98%
North of England - 4 £55,000 -
Wales - 3 £30,882 - 5
North West - 3 £55,000 -
East Midlands - 2 £55,000 -
Scotland +40 1 £41,330 -31.12%
Yorkshire - 1 - -

For the 6 months to 19 February 2020, IT jobs citing HMG Security Policy Framework also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for HMG Security Policy Framework.

1 112 (76.71%) ISO/IEC 27001
2 101 (69.18%) Information Security
3 72 (49.32%) Cybersecurity
4 67 (45.89%) JSP 440
5 66 (45.21%) Security Cleared
6 54 (36.99%) CISSP
6 54 (36.99%) Public Sector
7 52 (35.62%) Service Delivery
8 50 (34.25%) TOGAF
9 49 (33.56%) Security Architecture
9 49 (33.56%) SABSA
10 45 (30.82%) Information Assurance
10 45 (30.82%) CESG
11 43 (29.45%) SC Cleared
12 41 (28.08%) CISM
12 41 (28.08%) Management Information System
12 41 (28.08%) ITIL
13 38 (26.03%) PCI DSS
14 37 (25.34%) CESG Certified Professional
15 35 (23.97%) Stakeholder Management
16 34 (23.29%) SIEM
17 33 (22.60%) Firewall
18 30 (20.55%) Azure
19 29 (19.86%) Project Management
20 28 (19.18%) NCSC
21 27 (18.49%) Risk Management
21 27 (18.49%) C
22 26 (17.81%) Sarbanes-Oxley
22 26 (17.81%) Degree
22 26 (17.81%) AWS

HMG Security Policy Framework
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 13 (8.90%) IIS
2 2 (1.37%) Tomcat
2 2 (1.37%) WebSphere
3 1 (0.68%) SharePoint
3 1 (0.68%) Skype for Business
Applications
1 5 (3.42%) Microsoft Excel
1 5 (3.42%) Microsoft PowerPoint
2 4 (2.74%) MS Visio
3 1 (0.68%) Microsoft Office
Business Applications
1 1 (0.68%) Dynamics CRM
1 1 (0.68%) Sentinel
Cloud Services
1 30 (20.55%) Azure
2 26 (17.81%) AWS
3 2 (1.37%) Cloud Computing
3 2 (1.37%) IaaS
3 2 (1.37%) Office 365
3 2 (1.37%) PaaS
3 2 (1.37%) SaaS
Communications & Networking
1 33 (22.60%) Firewall
2 11 (7.53%) Internet
3 4 (2.74%) Intrusion Detection
4 1 (0.68%) DKIM
4 1 (0.68%) DMARC
4 1 (0.68%) LAN
4 1 (0.68%) Network Security
4 1 (0.68%) RTP
4 1 (0.68%) WAN
Database & Business Intelligence
1 3 (2.05%) SQL Server
2 2 (1.37%) SQL Server 2012
Development Applications
1 2 (1.37%) Git (software)
General
1 54 (36.99%) Public Sector
2 13 (8.90%) Finance
3 11 (7.53%) Military
4 10 (6.85%) Electronics
4 10 (6.85%) Manufacturing
4 10 (6.85%) Marketing
4 10 (6.85%) Telecoms
5 8 (5.48%) Legal
6 2 (1.37%) Aerospace
6 2 (1.37%) Banking
7 1 (0.68%) Law
7 1 (0.68%) Police
7 1 (0.68%) Retail
Job Titles
1 39 (26.71%) Architect
2 36 (24.66%) Consultant
2 36 (24.66%) Security Architect
3 33 (22.60%) Security Manager
4 32 (21.92%) Security Consultant
5 23 (15.75%) Cybersecurity Consultant
6 22 (15.07%) AWS Architect
6 22 (15.07%) Azure Architect
6 22 (15.07%) Cloud Architect
6 22 (15.07%) Information Manager
6 22 (15.07%) Information Security Manager
7 13 (8.90%) Enterprise Architect
7 13 (8.90%) Enterprise Security Architect
8 11 (7.53%) Security Engineer
9 10 (6.85%) Cybersecurity Engineer
9 10 (6.85%) IT Architect
9 10 (6.85%) IT Manager
9 10 (6.85%) IT Security Architect
9 10 (6.85%) IT Security Manager
10 9 (6.16%) Principal Security Architect
Libraries, Frameworks & Software Standards
1 8 (5.48%) ModSecurity
2 4 (2.74%) SOAP
2 4 (2.74%) Web Services
3 2 (1.37%) IBM Integration Bus
3 2 (1.37%) Java SE
3 2 (1.37%) JSON
3 2 (1.37%) JSP
3 2 (1.37%) Play Framework
3 2 (1.37%) REST
3 2 (1.37%) Spring
3 2 (1.37%) XML
4 1 (0.68%) Regular Expression
Miscellaneous
1 45 (30.82%) CESG
2 41 (28.08%) Management Information System
3 23 (15.75%) PKI
4 10 (6.85%) Self-Motivation
5 9 (6.16%) Analytical Skills
6 8 (5.48%) Data Protection Act
7 4 (2.74%) Virtual Team
8 3 (2.05%) Cloud Native
9 2 (1.37%) FMCG
10 1 (0.68%) Client/Server
10 1 (0.68%) Cyberthreat
10 1 (0.68%) Freedom of Information
10 1 (0.68%) Security Operations Centre
Operating Systems
1 2 (1.37%) Linux
2 1 (0.68%) Apple iOS
2 1 (0.68%) Windows
2 1 (0.68%) Windows 10
Processes & Methodologies
1 101 (69.18%) Information Security
2 72 (49.32%) Cybersecurity
3 52 (35.62%) Service Delivery
4 50 (34.25%) TOGAF
5 49 (33.56%) SABSA
5 49 (33.56%) Security Architecture
6 45 (30.82%) Information Assurance
7 41 (28.08%) ITIL
8 35 (23.97%) Stakeholder Management
9 34 (23.29%) SIEM
10 29 (19.86%) Project Management
11 27 (18.49%) Risk Management
12 26 (17.81%) Customer Requirements
12 26 (17.81%) Time Management
13 23 (15.75%) Enterprise Architecture
13 23 (15.75%) Risk Analysis
14 21 (14.38%) Cryptography
14 21 (14.38%) Identity Management
14 21 (14.38%) ISMS
14 21 (14.38%) Vulnerability Scanning
Programming Languages
1 27 (18.49%) C
2 4 (2.74%) Java
3 2 (1.37%) C++
3 2 (1.37%) PowerShell
3 2 (1.37%) Python
3 2 (1.37%) Scala
4 1 (0.68%) SQL
Qualifications
1 66 (45.21%) Security Cleared
2 54 (36.99%) CISSP
3 43 (29.45%) SC Cleared
4 41 (28.08%) CISM
5 37 (25.34%) CESG Certified Professional
6 26 (17.81%) Degree
7 18 (12.33%) Master's Degree
8 13 (8.90%) DV Cleared
8 13 (8.90%) IISP
9 12 (8.22%) CLAS
10 10 (6.85%) CREST Certified
11 8 (5.48%) CISMP
12 7 (4.79%) CISA
12 7 (4.79%) CRISC
13 2 (1.37%) CASP
13 2 (1.37%) CEH
13 2 (1.37%) GIAC
13 2 (1.37%) SANS
13 2 (1.37%) TOGAF Certification
14 1 (0.68%) GCIA
Quality Assurance & Compliance
1 112 (76.71%) ISO/IEC 27001
2 67 (45.89%) JSP 440
3 38 (26.03%) PCI DSS
4 28 (19.18%) NCSC
5 26 (17.81%) Sarbanes-Oxley
6 23 (15.75%) COBIT
6 23 (15.75%) Cyber Essentials
7 17 (11.64%) CESG Infosec
8 12 (8.22%) NIST
8 12 (8.22%) RMADS
9 9 (6.16%) HMG Infosec
10 8 (5.48%) GDPR
11 4 (2.74%) ISO 22301
11 4 (2.74%) NIST 800
11 4 (2.74%) QA
12 2 (1.37%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
13 1 (0.68%) BS25999
13 1 (0.68%) SLA
System Software
1 2 (1.37%) Docker
2 1 (0.68%) Active Directory
Systems Management
1 2 (1.37%) Kubernetes
2 1 (0.68%) CASB
2 1 (0.68%) QRadar
2 1 (0.68%) Symantec Endpoint Protection
Vendors
1 10 (6.85%) SAP
2 9 (6.16%) Capita
3 7 (4.79%) Splunk
4 4 (2.74%) Microsoft
5 2 (1.37%) Cisco
5 2 (1.37%) IBM
5 2 (1.37%) Juniper
6 1 (0.68%) McAfee
6 1 (0.68%) Symantec
6 1 (0.68%) Trend Micro