Job Vacancy Trend Salary Trend Salary Histogram Job Locations Skill Sets
Period
to 14 May 2021

The following table provides summary statistics for permanent job vacancies with a requirement for NCSC skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited NCSC over the 6 months to 14 May 2021 with a comparison to the same period in the previous 2 years.

National Cyber Security Centre (NCSC)
UK
6 months to
14 May 2021		 Same period 2020 Same period 2019
Rank 724 792 976
Rank change year-on-year +68 +184 +179
Permanent jobs citing NCSC 185 133 145
As % of all permanent jobs advertised in the UK 0.20% 0.14% 0.10%
As % of the Quality Assurance & Compliance category 1.65% 1.10% 0.71%
Number of salaries quoted 121 86 90
10th Percentile £47,500 £48,875 £49,750
25th Percentile £52,500 £56,063 £57,500
Median annual salary (50th Percentile) £65,000 £70,000 £70,000
Median % change year-on-year -7.14% - +1.82%
75th Percentile £71,250 £83,750 £76,250
90th Percentile £78,750 £92,500 £96,250
UK excluding London median annual salary £61,750 £65,000 £70,000
% change year-on-year -5.00% -7.14% +29.03%

NCSC is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for quality assurance or compliance skills.

All Quality Assurance and Compliance Skills
UK
Permanent vacancies with a requirement for quality assurance or compliance skills 11,190 12,057 20,429
As % of all permanent IT jobs advertised in the UK 12.36% 12.38% 14.14%
Number of salaries quoted 7,678 9,320 14,926
10th Percentile £31,250 £29,000 £27,625
25th Percentile £40,500 £37,500 £37,500
Median annual salary (50th Percentile) £52,500 £52,500 £50,000
Median % change year-on-year - +5.00% -
75th Percentile £70,000 £70,000 £67,500
90th Percentile £85,000 £85,000 £83,000
UK excluding London median annual salary £47,500 £47,000 £45,000
% change year-on-year +1.06% +4.44% -

NCSC
Job Vacancy Trend

Job postings citing NCSC as a proportion of all IT jobs advertised.

Job vacancy trend for NCSC in the UK

NCSC
Salary Trend

3-month moving average salary quoted in jobs citing NCSC.

Salary trend for NCSC in the UK

NCSC
Salary Histogram

Salary distribution for jobs citing NCSC over the 6 months to 14 May 2021.

Salary histogram for NCSC in the UK

NCSC
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing NCSC within the UK over the 6 months to 14 May 2021. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year		 Matching
Permanent
IT Job Ads		 Median Salary
Past 6 Months		 Median Salary
% Change
on Same Period
Last Year		 Live
Job
Vacancies
UK excluding London +79 134 £61,750 -5.00% 21
England +46 132 £65,000 -7.14% 22
South East +69 55 £61,000 -9.63% 7
Scotland +15 33 £55,000 -8.33% 1
London +46 30 £67,500 -7.46% 3
Work from Home -153 30 £67,500 -3.57% 1
Midlands +10 20 £67,500 +3.85% 4
West Midlands +13 17 £67,500 +12.50% 1
North of England -5 16 £60,000 +11.73% 2
North West +18 8 £58,750 +9.41% 1
Yorkshire -7 8 £62,500 +11.11% 1
South West -46 8 £68,750 -23.61% 4
North East - 4 £62,500 -
East Midlands - 3 £52,500 - 3
East of England +27 1 £42,500 -29.17% 2
Wales +22 1 £52,500 - 1

For the 6 months to 14 May 2021, IT jobs citing NCSC also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for NCSC.

1 117 (63.24%) ISO/IEC 27001
2 105 (56.76%) Information Security
3 99 (53.51%) Cybersecurity
4 72 (38.92%) Risk Management
5 70 (37.84%) NIST
6 65 (35.14%) CISSP
7 61 (32.97%) HMG Security Policy Framework
8 57 (30.81%) Social Skills
9 52 (28.11%) Security Cleared
10 51 (27.57%) CISM
11 49 (26.49%) JSP 440
12 46 (24.86%) SABSA
13 43 (23.24%) Azure
14 41 (22.16%) Security Architecture
15 40 (21.62%) TOGAF
16 39 (21.08%) Risk Analysis
17 38 (20.54%) SC Cleared
18 37 (20.00%) CESG Certified Professional
19 36 (19.46%) Migration
20 35 (18.92%) CESG
21 34 (18.38%) Agile Software Development
22 32 (17.30%) Information Assurance
23 31 (16.76%) SIEM
24 30 (16.22%) PCI DSS
24 30 (16.22%) GDPR
25 29 (15.68%) ISO/IEC 27005
26 25 (13.51%) AWS
27 24 (12.97%) Cyber Essentials
28 22 (11.89%) Risk Assessment
28 22 (11.89%) Security Management

NCSC
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 4 (2.16%) Confluence
2 2 (1.08%) Red Hat Fuse
3 1 (0.54%) Camunda
Applications
1 3 (1.62%) Microsoft Excel
1 3 (1.62%) MS Visio
2 2 (1.08%) Microsoft Office
3 1 (0.54%) Microsoft PowerPoint
Business Applications
1 9 (4.86%) Infor M3
2 3 (1.62%) NetSuite
Cloud Services
1 43 (23.24%) Azure
2 25 (13.51%) AWS
3 11 (5.95%) PaaS
3 11 (5.95%) SaaS
4 9 (4.86%) IaaS
5 7 (3.78%) Azure Active Directory
5 7 (3.78%) GCP
6 6 (3.24%) Google Workspace
7 5 (2.70%) Microsoft 365
8 4 (2.16%) Amazon GuardDuty
9 3 (1.62%) Cloud Computing
9 3 (1.62%) Dynamics 365
10 2 (1.08%) Amazon CloudWatch
11 1 (0.54%) HP Helion
11 1 (0.54%) IBM Cloud
11 1 (0.54%) OpenShift
11 1 (0.54%) SoftLayer
Communications & Networking
1 13 (7.03%) Firewall
2 8 (4.32%) Network Security
3 6 (3.24%) 5G
3 6 (3.24%) TCP/IP
3 6 (3.24%) WAN
4 4 (2.16%) DHCP
4 4 (2.16%) DNS
4 4 (2.16%) Internet
4 4 (2.16%) RTP
4 4 (2.16%) Unified Communications
4 4 (2.16%) VPN
5 3 (1.62%) Intrusion Detection
5 3 (1.62%) Wireless
6 2 (1.08%) Ethernet
6 2 (1.08%) HTTP
6 2 (1.08%) LAN
6 2 (1.08%) SSH
6 2 (1.08%) SSL
6 2 (1.08%) Wireless Security
7 1 (0.54%) LTE
Database & Business Intelligence
1 11 (5.95%) Big Data
2 1 (0.54%) Data Warehouse
2 1 (0.54%) MySQL
2 1 (0.54%) PostgreSQL
2 1 (0.54%) Relational Database
Development Applications
1 8 (4.32%) JIRA
2 2 (1.08%) Snyk
3 1 (0.54%) Ant
3 1 (0.54%) Cucumber
3 1 (0.54%) Git (software)
3 1 (0.54%) Gradle
3 1 (0.54%) JUnit
3 1 (0.54%) Maven
3 1 (0.54%) Mockito
General
1 57 (30.81%) Social Skills
2 13 (7.03%) Influencing Skills
3 12 (6.49%) Finance
4 10 (5.41%) Manufacturing
5 8 (4.32%) Analytical Skills
5 8 (4.32%) Public Sector
6 6 (3.24%) Public Speaking
7 5 (2.70%) Law
8 4 (2.16%) Legal
9 3 (1.62%) Aerospace
10 1 (0.54%) Billing
10 1 (0.54%) Marketing
10 1 (0.54%) Police
10 1 (0.54%) Retail
Job Titles
1 67 (36.22%) Architect
2 59 (31.89%) Security Architect
3 55 (29.73%) Consultant
4 36 (19.46%) Security Consultant
5 17 (9.19%) Information Security Consultant
6 13 (7.03%) Cybersecurity Architect
7 12 (6.49%) Cybersecurity Consultant
8 11 (5.95%) Information Assurance Consultant
8 11 (5.95%) Security Specialist
9 9 (4.86%) Risk Consultant
10 8 (4.32%) Security Engineer
11 7 (3.78%) Analyst
11 7 (3.78%) Cybersecurity Specialist
11 7 (3.78%) Security Manager
11 7 (3.78%) Senior Consultant
12 6 (3.24%) CyberArk Specialist
12 6 (3.24%) Cybersecurity Engineer
12 6 (3.24%) Managing Consultant
12 6 (3.24%) Network Engineer
12 6 (3.24%) Senior Information Assurance Consultant
Libraries, Frameworks & Software Standards
1 6 (3.24%) LDAP
2 4 (2.16%) REST
3 2 (1.08%) 802.1X
3 2 (1.08%) SOAP
3 2 (1.08%) Velocity
3 2 (1.08%) XML
4 1 (0.54%) AngularJS
4 1 (0.54%) CSS
4 1 (0.54%) HTML
4 1 (0.54%) ModSecurity
4 1 (0.54%) Nightwatchjs
4 1 (0.54%) React
4 1 (0.54%) Spring
4 1 (0.54%) Spring Boot
4 1 (0.54%) Twitter Bootstrap
4 1 (0.54%) Vue.js
4 1 (0.54%) Web Services
Miscellaneous
1 35 (18.92%) CESG
2 10 (5.41%) Management Information System
3 9 (4.86%) Public Cloud
4 8 (4.32%) BYOD
5 7 (3.78%) Cyberthreat
6 6 (3.24%) Self-Motivation
7 5 (2.70%) Cyberattack
7 5 (2.70%) Security Operations Centre
8 4 (2.16%) Cloud Native
8 4 (2.16%) Data Centre
8 4 (2.16%) Distributed Denial-of-Service
9 3 (1.62%) Cyber Defence
9 3 (1.62%) Data Protection Act
9 3 (1.62%) PKI
10 2 (1.08%) Driving Licence
11 1 (0.54%) CCTV
11 1 (0.54%) SCADA
11 1 (0.54%) Smart Energy
11 1 (0.54%) User Experience
11 1 (0.54%) Virtual Team
Operating Systems
1 14 (7.57%) Linux
2 8 (4.32%) Windows
3 5 (2.70%) Windows Server
4 2 (1.08%) Ubuntu
5 1 (0.54%) Android
5 1 (0.54%) Unix
Processes & Methodologies
1 105 (56.76%) Information Security
2 99 (53.51%) Cybersecurity
3 72 (38.92%) Risk Management
4 46 (24.86%) SABSA
5 41 (22.16%) Security Architecture
6 40 (21.62%) TOGAF
7 39 (21.08%) Risk Analysis
8 36 (19.46%) Migration
9 34 (18.38%) Agile Software Development
10 32 (17.30%) Information Assurance
11 31 (16.76%) SIEM
12 22 (11.89%) Risk Assessment
12 22 (11.89%) Security Management
13 18 (9.73%) Penetration Testing
14 17 (9.19%) Information Security Management
15 15 (8.11%) ISMS
16 13 (7.03%) SDLC
16 13 (7.03%) Security Operations
17 10 (5.41%) DevOps
18 9 (4.86%) Customer-Centricity
Programming Languages
1 18 (9.73%) Python
2 17 (9.19%) Java
3 10 (5.41%) PowerShell
4 8 (4.32%) Bash Shell
5 4 (2.16%) C
6 2 (1.08%) SQL
7 1 (0.54%) C#
7 1 (0.54%) Java 8
7 1 (0.54%) JavaScript
7 1 (0.54%) Lua
7 1 (0.54%) Perl
7 1 (0.54%) Ruby
Qualifications
1 65 (35.14%) CISSP
2 52 (28.11%) Security Cleared
3 51 (27.57%) CISM
4 38 (20.54%) SC Cleared
5 37 (20.00%) CESG Certified Professional
6 16 (8.65%) SSCP
7 13 (7.03%) DV Cleared
8 11 (5.95%) SANS
9 10 (5.41%) Cisco Certification
9 10 (5.41%) Degree
10 9 (4.86%) Microsoft Certification
11 7 (3.78%) CEH
12 6 (3.24%) PCI QSA
13 5 (2.70%) CISA
14 4 (2.16%) CCNA
14 4 (2.16%) CCNP
14 4 (2.16%) CRISC
14 4 (2.16%) FFIEC
15 3 (1.62%) CASP
15 3 (1.62%) CISMP
Quality Assurance & Compliance
1 117 (63.24%) ISO/IEC 27001
2 70 (37.84%) NIST
3 61 (32.97%) HMG Security Policy Framework
4 49 (26.49%) JSP 440
5 30 (16.22%) GDPR
5 30 (16.22%) PCI DSS
6 29 (15.68%) ISO/IEC 27005
7 24 (12.97%) Cyber Essentials
8 21 (11.35%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
9 15 (8.11%) RMADS
10 10 (5.41%) Government Security Classifications
10 10 (5.41%) NIST 800
11 8 (4.32%) Sarbanes-Oxley
12 6 (3.24%) PA-DSS
13 3 (1.62%) QA
14 2 (1.08%) GRC
15 1 (0.54%) COBIT
15 1 (0.54%) IASME
15 1 (0.54%) ISO 22301
System Software
1 11 (5.95%) Active Directory
2 5 (2.70%) Docker
3 4 (2.16%) VMware ESXi
4 2 (1.08%) Firmware
5 1 (0.54%) Virtual Machines
Systems Management
1 19 (10.27%) Ansible
2 17 (9.19%) Terraform
3 4 (2.16%) Nessus
4 2 (1.08%) McAfee ePO
4 2 (1.08%) OpenVAS
4 2 (1.08%) ZABBIX
5 1 (0.54%) CSIRT
5 1 (0.54%) Kubernetes
5 1 (0.54%) Single Sign-On
Vendors
1 16 (8.65%) Microsoft
2 9 (4.86%) Cisco
2 9 (4.86%) Google
3 7 (3.78%) Oracle
4 6 (3.24%) CyberArk
5 4 (2.16%) Dell
5 4 (2.16%) VMware
6 3 (1.62%) JD Edwards
6 3 (1.62%) Red Hat
7 2 (1.08%) AlienVault
7 2 (1.08%) Fortinet
7 2 (1.08%) McAfee
7 2 (1.08%) Palo Alto
7 2 (1.08%) Rapid7
7 2 (1.08%) Sophos
7 2 (1.08%) Splunk
7 2 (1.08%) Symantec
8 1 (0.54%) Atlassian
8 1 (0.54%) Centrify
8 1 (0.54%) ForeScout