UK Cybersecurity Jobs Pay Under £45K on Average, Study Reveals

▼ Summary
– UK public sector cybersecurity roles pay an average of £44,739, among the lowest across sectors, with only NGOs offering less (£40,750).
– The UK government has faced criticism for low cybersecurity salaries, exemplified by a 2023 HM Treasury role offering £50,550–£57,500.
– Insurance, legal, and finance sectors offer the highest average cybersecurity salaries (£79,167, £75,000, and £74,998 respectively), while some industries lack salary transparency.
– IT has the most UK cybersecurity job openings (27%), followed by management & consulting (17%) and finance (15%), while government roles account for just 3%.
– The cybersecurity skills gap primarily affects senior and niche roles, with experts calling for greater transparency in pay and job availability to address the issue.
Cybersecurity professionals in the UK public sector earn significantly less than their private sector counterparts, with average salaries hovering around £44,739, according to recent research. The findings highlight a growing disparity in compensation across industries, raising concerns about the government’s ability to attract top talent in an increasingly competitive field.
A comprehensive analysis of 768 job postings revealed that government and public administration roles rank among the lowest-paying positions, surpassed only by non-profits and NGOs, which offer an average of £40,750. This wage gap has sparked criticism, particularly after a 2023 HM Treasury listing for a cybersecurity head role advertised a modest £50,550–£57,500 salary range, a figure widely deemed insufficient for such a critical position.
The highest-paying sectors paint a stark contrast. Insurance leads the pack with average cybersecurity salaries of £79,167, followed closely by legal (£75,000) and finance (£74,998). However, transparency remains an issue, as industries like pharmaceuticals, hospitality, and property frequently omit salary details from job postings. Surprisingly, government roles were the most transparent, with every listing disclosing compensation.
Demand for cybersecurity talent varies widely by sector. IT dominates the market, accounting for 27% of open positions, while management consulting (17%) and finance (15%) follow. Public sector roles make up just 3% of listings, with niche industries like legal and arts featuring even fewer opportunities.
Industry experts point to a mismatch between job availability and skill requirements. While a well-documented skills gap exists, most openings target experienced professionals in specialized areas like operational technology (OT) security and architecture, leaving fewer entry-level options. Anthony Young, CEO of Bridewell, emphasizes the need for greater transparency in pay and job expectations to align employer needs with workforce capabilities.
The data underscores a pressing challenge: without competitive salaries and clearer career pathways, the UK risks falling behind in securing the expertise needed to defend against evolving cyber threats. Addressing these gaps will require collaboration between policymakers, employers, and educators to ensure the cybersecurity workforce remains robust and well-compensated.
(Source: INFOSECURITY)