Period
to 22 October 2018

The median annual salary for an Information Security Manager was £62,500 in advertised job vacancies during the 6 months to 22 October 2018.

The first table below provides salary benchmarking and summary statistics including a comparison to same period in the previous 2 years.

Information Security Manager
UK
6 months to
22 Oct 2018
Same period 2017 Same period 2016
Rank 733 848 744
Rank change year-on-year +115 -104 +123
Permanent jobs requiring an Information Security Manager 456 370 559
As % of all permanent IT jobs advertised in the UK 0.28% 0.21% 0.29%
As % of the Job Titles category 0.29% 0.22% 0.31%
Number of salaries quoted 404 324 505
UK median annual salary £62,500 £67,000 £60,000
Median salary % change year-on-year -6.72% +11.67% -
10th Percentile £51,000 £47,500 £46,550
90th Percentile £87,500 £88,750 £87,500
UK excluding London median annual salary £60,000 £60,000 £60,000

The following table is for comparison with the above and includes summary statistics for all permanent IT job vacancies. Most job vacancies include a discernible job title that can be normalized. As such, the figures in the second row provide an indication of the number of permanent jobs in our overall sample.

All Permanent IT Job Vacancies
UK
Permanent vacancies in the UK with a recognized job title 158,054 167,354 183,138
% of permanent IT jobs with a recognized job title 95.91% 95.94% 96.56%
Number of salaries quoted 127,348 133,989 153,460
UK median annual salary £50,000 £48,000 £47,500
Median salary % change year-on-year +4.17% +1.05% +5.56%
10th Percentile £27,500 £27,500 £27,000
90th Percentile £82,500 £78,750 £77,500
UK excluding London median annual salary £45,000 £42,500 £42,500
% change year-on-year +5.88% - +6.25%

Information Security Manager
Job Vacancy Trend

Job postings that featured Information Security Manager in the job title as a percentage of all IT jobs advertised.

Job vacancy trend for Information Security Manager in the UK

Information Security Manager
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing Information Security Manager.

Salary trend for Information Security Manager in the UK

Information Security Manager
Salary Histogram

The salary distribution of IT jobs citing Information Security Manager over the 6 months to 22 October 2018.

Salary histogram for Information Security Manager in the UK

Information Security Manager
Top 15 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Information Security Manager within the UK over the 6 months to 22 October 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +124 441 £62,500 -7.41% 49
UK excluding London +140 314 £60,000 - 24
London -6 138 £75,000 +3.45% 27
North of England +84 135 £60,000 +9.09% 5
North West +73 104 £60,000 +9.09% 5
South East +13 60 £65,000 +1.56% 4
Midlands +37 48 £57,500 +4.55% 6
West Midlands +47 45 £57,500 +4.55% 3
East of England +36 37 £75,000 +7.14% 2
Yorkshire +32 23 £52,250 -2.79%
South West +6 20 £62,500 +25.00% 5
Scotland +8 10 £40,500 -29.57% 2
North East -9 8 £67,000 +41.05%
Wales -6 4 £44,750 -31.15%
East Midlands -14 3 £66,000 +22.22% 3

Information Security Manager Skill Set
Top 30 Co-occurring IT Skills

For the 6 months to 22 October 2018, Information Security Manager job roles required the following IT skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads featuring Information Security Manager in the job title.

1 455 (99.78%) Information Security
2 313 (68.64%) CISSP
3 304 (66.67%) ISO/IEC 27001
4 207 (45.39%) CISM
5 169 (37.06%) Security Management
6 159 (34.87%) Risk Management
7 150 (32.89%) PCI DSS
8 144 (31.58%) SIEM
9 129 (28.29%) GDPR
10 121 (26.54%) Incident Management
11 115 (25.22%) Data Protection
11 115 (25.22%) Management Information System
12 111 (24.34%) Degree
13 110 (24.12%) Penetration Testing
14 105 (23.03%) Finance
15 95 (20.83%) CISA
16 93 (20.39%) Linux
17 92 (20.18%) ISMS
18 91 (19.96%) Windows
19 89 (19.52%) Information Security Management
20 82 (17.98%) Cybersecurity
21 79 (17.32%) ITIL
22 77 (16.89%) Vulnerability Assessment
23 75 (16.45%) Microsoft
24 73 (16.01%) Data Loss Prevention
25 72 (15.79%) Active Directory
26 70 (15.35%) Cisco Certification
26 70 (15.35%) Microsoft Azure
27 69 (15.13%) OWASP
28 68 (14.91%) Amazon AWS

Information Security Manager Skill Set
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 10 (2.19%) IIS
2 5 (1.10%) MS Exchange
3 1 (0.22%) SAS
3 1 (0.22%) SharePoint
3 1 (0.22%) SharePoint 2013
Applications
1 2 (0.44%) Microsoft Excel
1 2 (0.44%) Microsoft Office
Cloud Services
1 70 (15.35%) Microsoft Azure
2 68 (14.91%) Amazon AWS
3 29 (6.36%) SaaS
4 5 (1.10%) IaaS
4 5 (1.10%) PaaS
5 3 (0.66%) Cloud Computing
6 2 (0.44%) Serverless
Communications & Networking
1 31 (6.80%) Firewall
2 29 (6.36%) Network Security
3 18 (3.95%) Intrusion Detection
4 10 (2.19%) TCP/IP
5 7 (1.54%) SCCP
5 7 (1.54%) WAN
6 6 (1.32%) IPsec
6 6 (1.32%) LAN
6 6 (1.32%) SSL
6 6 (1.32%) VPN
7 5 (1.10%) Intranet
7 5 (1.10%) Wireless
8 3 (0.66%) FTP
8 3 (0.66%) Unified Communications
9 1 (0.22%) Cisco IPT
9 1 (0.22%) SAN
Database & Business Intelligence
1 8 (1.75%) GIS
2 2 (0.44%) Big Data
3 1 (0.22%) Data Lake
3 1 (0.22%) Hadoop
3 1 (0.22%) QlikView
General
1 105 (23.03%) Finance
2 65 (14.25%) Legal
3 21 (4.61%) Banking
4 15 (3.29%) Law
5 11 (2.41%) Retail
6 8 (1.75%) Marketing
7 6 (1.32%) Local Government
8 4 (0.88%) Telecoms
9 3 (0.66%) Back Office
9 3 (0.66%) Investment Banking
10 2 (0.44%) Manufacturing
11 1 (0.22%) Corporate Banking
11 1 (0.22%) Electronics
Libraries, Frameworks & Software Standards
1 8 (1.75%) Elastic Stack
2 4 (0.88%) LDAP
3 2 (0.44%) Middleware
Miscellaneous
1 115 (25.22%) Management Information System
2 29 (6.36%) Analytical Skills
3 25 (5.48%) Data Centre
3 25 (5.48%) Data Protection Act
4 21 (4.61%) Self-Motivation
5 16 (3.51%) CESG
6 10 (2.19%) Computer Science
6 10 (2.19%) Enterprise Software
7 8 (1.75%) Cyberattack
7 8 (1.75%) Security Operations Centre
8 6 (1.32%) Cyberthreat
9 5 (1.10%) Greenfield Project
10 4 (0.88%) Virtual Team
11 3 (0.66%) Cybercrime
11 3 (0.66%) e-Learning
12 2 (0.44%) Digital Media
12 2 (0.44%) Fintech
12 2 (0.44%) PKI
13 1 (0.22%) Freedom of Information Act
13 1 (0.22%) Smartphone
Operating Systems
1 93 (20.39%) Linux
2 91 (19.96%) Windows
3 21 (4.61%) Unix
Processes & Methodologies
1 455 (99.78%) Information Security
2 169 (37.06%) Security Management
3 159 (34.87%) Risk Management
4 144 (31.58%) SIEM
5 121 (26.54%) Incident Management
6 115 (25.22%) Data Protection
7 110 (24.12%) Penetration Testing
8 92 (20.18%) ISMS
9 89 (19.52%) Information Security Management
10 82 (17.98%) Cybersecurity
11 79 (17.32%) ITIL
12 77 (16.89%) Vulnerability Assessment
13 73 (16.01%) Data Loss Prevention
14 69 (15.13%) OWASP
15 43 (9.43%) Stakeholder Management
15 43 (9.43%) Vulnerability Management
16 42 (9.21%) Internal Audit
17 40 (8.77%) Business Continuity
18 37 (8.11%) Disaster Recovery
18 37 (8.11%) Information Security Governance
Programming Languages
1 10 (2.19%) C
2 3 (0.66%) SQL
3 1 (0.22%) PL/SQL
Qualifications
1 313 (68.64%) CISSP
2 207 (45.39%) CISM
3 111 (24.34%) Degree
4 95 (20.83%) CISA
5 70 (15.35%) Cisco Certification
6 66 (14.47%) (ISC)2 CCSP
7 41 (8.99%) CRISC
8 25 (5.48%) Security Cleared
9 19 (4.17%) SC Cleared
10 18 (3.95%) CREST Certified
11 17 (3.73%) CISMP
12 16 (3.51%) Computer Science Degree
13 11 (2.41%) ISO 27001 Lead Auditor
13 11 (2.41%) SSCP
14 10 (2.19%) IISP
15 8 (1.75%) Microsoft Certification
15 8 (1.75%) PCI QSA
16 7 (1.54%) CCSP
16 7 (1.54%) CEH
16 7 (1.54%) MCSE
Quality Assurance & Compliance
1 304 (66.67%) ISO/IEC 27001
2 150 (32.89%) PCI DSS
3 129 (28.29%) GDPR
4 38 (8.33%) Cyber Essentials
5 20 (4.39%) ISO 22301
6 17 (3.73%) Cyber Essentials PLUS
6 17 (3.73%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 16 (3.51%) COBIT
8 8 (1.75%) MiFID
9 7 (1.54%) ISO 9001
10 6 (1.32%) QA
11 5 (1.10%) ISO/IEC 27005
12 4 (0.88%) Government Security Classifications
13 3 (0.66%) HIPAA
13 3 (0.66%) ISO/IEC 20000
13 3 (0.66%) PMO
13 3 (0.66%) Sarbanes-Oxley
14 1 (0.22%) IASME
14 1 (0.22%) ISO 31000
14 1 (0.22%) SLA
System Software
1 72 (15.79%) Active Directory
2 8 (1.75%) Snort
Systems Management
1 8 (1.75%) OSSEC
2 4 (0.88%) Single Sign-On
3 3 (0.66%) RSA Archer
4 1 (0.22%) Host Intrusion Detection System
4 1 (0.22%) Kubernetes
Vendors
1 75 (16.45%) Microsoft
2 20 (4.39%) LogRhythm
3 9 (1.97%) Splunk
4 6 (1.32%) Qualys
4 6 (1.32%) Sun
5 3 (0.66%) Dell
5 3 (0.66%) LogLogic
5 3 (0.66%) Sophos
5 3 (0.66%) Symantec
5 3 (0.66%) TIBCO
6 2 (0.44%) Cisco
6 2 (0.44%) Google
6 2 (0.44%) McAfee
6 2 (0.44%) TOWER Software
6 2 (0.44%) Trend Micro
7 1 (0.22%) Ab Initio
7 1 (0.22%) CA
7 1 (0.22%) Citrix
7 1 (0.22%) SAP
7 1 (0.22%) VMware