Period
to 2 March 2021

The following table provides summary statistics for permanent job vacancies with a requirement for NCSC skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited NCSC over the 6 months to 2 March 2021 with a comparison to the same period in the previous 2 years.

National Cyber Security Centre (NCSC)
UK
6 months to
2 Mar 2021
Same period 2020 Same period 2019
Rank 655 846 981
Rank change year-on-year +191 +135 +192
Permanent jobs citing NCSC 163 185 131
As % of all permanent jobs advertised in the UK 0.22% 0.15% 0.087%
As % of the Quality Assurance & Compliance category 1.81% 1.22% 0.63%
Number of salaries quoted 136 143 90
Median annual salary £65,000 £70,000 £70,000
Median salary % change year-on-year -7.14% - +30.84%
10th Percentile £50,000 £50,250 £52,998
90th Percentile £87,500 £93,750 £95,125
UK excluding London median annual salary £65,000 £65,000 £65,000

NCSC is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for quality assurance or compliance skills.

All Quality Assurance and Compliance Skills
UK
Permanent vacancies with a requirement for quality assurance or compliance skills 8,991 15,207 20,918
As % of all permanent IT jobs advertised in the UK 11.93% 12.54% 13.91%
Number of salaries quoted 6,459 11,870 15,511
Median annual salary £52,500 £52,500 £50,000
Median salary % change year-on-year - +5.00% -
10th Percentile £31,149 £28,500 £27,500
90th Percentile £85,000 £83,750 £81,250
UK excluding London median annual salary £47,500 £45,000 £45,000
% change year-on-year +5.56% - +4.65%

NCSC
Job Vacancy Trend

Job postings citing NCSC as a proportion of all IT jobs advertised.

Job vacancy trend for NCSC in the UK

NCSC
Salary Trend

3-month moving average salary quoted in jobs citing NCSC.

Salary trend for NCSC in the UK

NCSC
Salary Histogram

Salary distribution for jobs citing NCSC over the 6 months to 2 March 2021.

Salary histogram for NCSC in the UK

NCSC
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing NCSC within the UK over the 6 months to 2 March 2021. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +164 127 £65,000 -6.60% 23
UK excluding London +161 125 £65,000 - 21
South East +139 45 £65,000 - 10
Work from Home -111 32 £70,000 -5.08% 5
South West +23 24 £65,000 -15.46% 1
Scotland +47 22 £55,000 -17.76% 4
London +109 21 £71,250 -3.39% 6
Midlands +79 21 £70,000 -5.08% 3
West Midlands +61 20 £70,000 +0.90% 3
North of England +48 14 £60,000 +5.62% 3
North West +45 7 £57,500 +1.57% 2
Yorkshire +41 7 £62,500 -4.76% 1
North East - 3 £62,500 -
East of England +74 2 £85,000 +47.83%
Northern Ireland +13 1 £65,000 +30.00%
East Midlands - 1 £30,000 -

For the 6 months to 2 March 2021, IT jobs citing NCSC also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for NCSC.

1 108 (66.26%) ISO/IEC 27001
2 88 (53.99%) Information Security
3 84 (51.53%) Cybersecurity
4 71 (43.56%) Risk Management
5 67 (41.10%) CISSP
6 63 (38.65%) HMG Security Policy Framework
7 59 (36.20%) CISM
8 55 (33.74%) Security Cleared
9 53 (32.52%) NIST
10 50 (30.67%) Security Architecture
11 49 (30.06%) CESG Certified Professional
12 41 (25.15%) SC Cleared
12 41 (25.15%) Information Assurance
12 41 (25.15%) JSP 440
13 38 (23.31%) Azure
13 38 (23.31%) SABSA
14 35 (21.47%) Agile Software Development
15 32 (19.63%) TOGAF
15 32 (19.63%) ISO/IEC 27005
16 30 (18.40%) Risk Analysis
17 29 (17.79%) AWS
17 29 (17.79%) CESG
18 28 (17.18%) Security Management
19 27 (16.56%) Migration
19 27 (16.56%) Risk Assessment
19 27 (16.56%) GDPR
20 25 (15.34%) Public Sector
21 23 (14.11%) PCI DSS
22 22 (13.50%) SIEM
23 19 (11.66%) Terraform

NCSC
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 5 (3.07%) Confluence
2 2 (1.23%) Camunda
2 2 (1.23%) Red Hat Fuse
3 1 (0.61%) Adobe Experience Manager
3 1 (0.61%) CMS
3 1 (0.61%) Drupal
Applications
1 1 (0.61%) Microsoft Excel
1 1 (0.61%) Microsoft PowerPoint
1 1 (0.61%) MS Visio
Business Applications
1 9 (5.52%) Infor M3
Cloud Services
1 38 (23.31%) Azure
2 29 (17.79%) AWS
3 16 (9.82%) PaaS
4 15 (9.20%) SaaS
5 14 (8.59%) IaaS
6 9 (5.52%) GCP
7 7 (4.29%) Azure Active Directory
8 6 (3.68%) G Suite
9 3 (1.84%) Cloud Computing
10 2 (1.23%) Amazon CloudWatch
10 2 (1.23%) Amazon GuardDuty
10 2 (1.23%) Microsoft 365
10 2 (1.23%) OpenShift
11 1 (0.61%) Google Analytics
11 1 (0.61%) HP Helion
11 1 (0.61%) IBM Cloud
11 1 (0.61%) SoftLayer
Communications & Networking
1 9 (5.52%) Unified Communications
2 8 (4.91%) Firewall
2 8 (4.91%) Intrusion Detection
2 8 (4.91%) Network Security
3 6 (3.68%) 5G
4 5 (3.07%) RTP
5 3 (1.84%) VPN
5 3 (1.84%) Wireless
6 2 (1.23%) HTTP
6 2 (1.23%) LAN
6 2 (1.23%) WAN
6 2 (1.23%) Wireless Security
7 1 (0.61%) BGP
7 1 (0.61%) Internet
7 1 (0.61%) IPv4
7 1 (0.61%) IPv6
7 1 (0.61%) LTE
7 1 (0.61%) SSH
7 1 (0.61%) SSL
7 1 (0.61%) TCP/IP
Database & Business Intelligence
1 15 (9.20%) Big Data
2 2 (1.23%) MySQL
2 2 (1.23%) PostgreSQL
2 2 (1.23%) Relational Database
Development Applications
1 5 (3.07%) JIRA
2 3 (1.84%) Snyk
3 2 (1.23%) Ant
3 2 (1.23%) Cucumber
3 2 (1.23%) Git (software)
3 2 (1.23%) Gradle
3 2 (1.23%) JUnit
3 2 (1.23%) Maven
3 2 (1.23%) Mockito
4 1 (0.61%) Burp Suite
4 1 (0.61%) Jenkins
4 1 (0.61%) Visual Studio Team System
General
1 25 (15.34%) Public Sector
2 10 (6.13%) Finance
2 10 (6.13%) Manufacturing
3 5 (3.07%) Telecoms
4 4 (2.45%) Legal
5 3 (1.84%) Aerospace
5 3 (1.84%) Law
5 3 (1.84%) Marketing
6 1 (0.61%) Advertising
6 1 (0.61%) Electronics
Job Titles
1 65 (39.88%) Architect
2 57 (34.97%) Consultant
3 55 (33.74%) Security Architect
4 36 (22.09%) Security Consultant
5 17 (10.43%) Information Assurance Consultant
6 16 (9.82%) Information Security Consultant
7 14 (8.59%) Cybersecurity Consultant
8 9 (5.52%) Cloud Architect
9 8 (4.91%) Cybersecurity Architect
9 8 (4.91%) Senior Consultant
9 8 (4.91%) Senior Information Assurance Consultant
10 7 (4.29%) Risk Consultant
10 7 (4.29%) Solutions Architect
11 6 (3.68%) CyberArk Specialist
11 6 (3.68%) Managing Consultant
12 5 (3.07%) Security Manager
13 4 (2.45%) Security Engineer
13 4 (2.45%) Senior Architect
13 4 (2.45%) Senior Security Architect
13 4 (2.45%) Senior Security Consultant
Libraries, Frameworks & Software Standards
1 6 (3.68%) LDAP
2 3 (1.84%) AngularJS
2 3 (1.84%) React
2 3 (1.84%) Web Services
3 2 (1.23%) 802.1X
3 2 (1.23%) CSS
3 2 (1.23%) HTML
3 2 (1.23%) Nightwatchjs
3 2 (1.23%) REST
3 2 (1.23%) SOAP
3 2 (1.23%) Spring
3 2 (1.23%) Spring Boot
3 2 (1.23%) Twitter Bootstrap
3 2 (1.23%) Velocity
3 2 (1.23%) Vue.js
3 2 (1.23%) XML
4 1 (0.61%) Material Design
4 1 (0.61%) ModSecurity
Miscellaneous
1 29 (17.79%) CESG
2 18 (11.04%) Management Information System
3 9 (5.52%) Public Cloud
4 7 (4.29%) Analytical Skills
4 7 (4.29%) Security Operations Centre
5 6 (3.68%) BYOD
5 6 (3.68%) Cloud Native
6 5 (3.07%) Distributed Denial-of-Service
6 5 (3.07%) PKI
7 4 (2.45%) Cyberthreat
7 4 (2.45%) Self-Motivation
8 3 (1.84%) Cyberattack
9 2 (1.23%) Data Protection Act
9 2 (1.23%) User Experience
10 1 (0.61%) Data Centre
10 1 (0.61%) Mobile App
10 1 (0.61%) SCADA
10 1 (0.61%) Smart Energy
10 1 (0.61%) Social Media
10 1 (0.61%) Virtual Team
Operating Systems
1 9 (5.52%) Linux
2 2 (1.23%) Ubuntu
3 1 (0.61%) Android
3 1 (0.61%) Kali Linux
3 1 (0.61%) Windows
Processes & Methodologies
1 88 (53.99%) Information Security
2 84 (51.53%) Cybersecurity
3 71 (43.56%) Risk Management
4 50 (30.67%) Security Architecture
5 41 (25.15%) Information Assurance
6 38 (23.31%) SABSA
7 35 (21.47%) Agile Software Development
8 32 (19.63%) TOGAF
9 30 (18.40%) Risk Analysis
10 28 (17.18%) Security Management
11 27 (16.56%) Migration
11 27 (16.56%) Risk Assessment
12 22 (13.50%) SIEM
13 18 (11.04%) Information Security Management
13 18 (11.04%) ISMS
14 15 (9.20%) DevOps
15 14 (8.59%) Open Source
16 13 (7.98%) DevSecOps
17 12 (7.36%) Penetration Testing
17 12 (7.36%) SDLC
Programming Languages
1 17 (10.43%) Java
2 14 (8.59%) Python
3 8 (4.91%) PowerShell
4 7 (4.29%) Bash Shell
5 4 (2.45%) C
6 3 (1.84%) SQL
7 2 (1.23%) Java 8
7 2 (1.23%) JavaScript
8 1 (0.61%) C#
8 1 (0.61%) Lua
8 1 (0.61%) Ruby
Qualifications
1 67 (41.10%) CISSP
2 59 (36.20%) CISM
3 55 (33.74%) Security Cleared
4 49 (30.06%) CESG Certified Professional
5 41 (25.15%) SC Cleared
6 17 (10.43%) CISA
7 15 (9.20%) DV Cleared
8 10 (6.13%) CRISC
9 9 (5.52%) SSCP
10 8 (4.91%) CEH
10 8 (4.91%) SANS
11 7 (4.29%) Cisco Certification
12 6 (3.68%) Degree
12 6 (3.68%) PCI QSA
13 4 (2.45%) CASP
13 4 (2.45%) FFIEC
13 4 (2.45%) ISO 27001 Lead Implementer
14 3 (1.84%) (ISC)2 CCSP
14 3 (1.84%) Microsoft Certification
14 3 (1.84%) OSCP
Quality Assurance & Compliance
1 108 (66.26%) ISO/IEC 27001
2 63 (38.65%) HMG Security Policy Framework
3 53 (32.52%) NIST
4 41 (25.15%) JSP 440
5 32 (19.63%) ISO/IEC 27005
6 27 (16.56%) GDPR
7 23 (14.11%) PCI DSS
8 18 (11.04%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 18 (11.04%) RMADS
9 17 (10.43%) Cyber Essentials
10 12 (7.36%) Government Security Classifications
10 12 (7.36%) NIST 800
11 10 (6.13%) Sarbanes-Oxley
12 7 (4.29%) COBIT
13 6 (3.68%) PA-DSS
14 3 (1.84%) QA
15 1 (0.61%) Cyber Essentials PLUS
15 1 (0.61%) ISO 22301
15 1 (0.61%) ISO 31000
System Software
1 8 (4.91%) Docker
2 5 (3.07%) Active Directory
Systems Management
1 19 (11.66%) Terraform
2 13 (7.98%) Ansible
3 4 (2.45%) Nessus
4 3 (1.84%) OpenVAS
5 2 (1.23%) Kubernetes
5 2 (1.23%) ZABBIX
6 1 (0.61%) Single Sign-On
Vendors
1 14 (8.59%) Google
2 13 (7.98%) Microsoft
3 9 (5.52%) Oracle
4 6 (3.68%) CyberArk
5 4 (2.45%) Red Hat
6 3 (1.84%) AlienVault
6 3 (1.84%) Cisco
7 2 (1.23%) Atlassian
8 1 (0.61%) Arista
8 1 (0.61%) hybris
8 1 (0.61%) Juniper
8 1 (0.61%) SAP