Cybersecurity professionals in the UK have seen their wage increase far beyond inflation over the past few years, perhaps to make up for the scourge of anxiety, burnout, and stress that comes with the job.

This is according to the Chartered Institute for Information Security‘s (CIISec) annual Sae of the Security Profession report covering 2023/24, which based its results on an online survey of 311 cybersecurity professionals.

The average salary for the sector amounts of £87,204, over double the amount of the average UK wage of £34,900.

This is an increase of 29% since 2016, when the CIISec stared tracking the figure, and represents a 7% year-on-year increase even after inflation had been factored in.

Wages across the board are rising as well, with nearly one in five (18%) of cybersecurity professionals earning more than £150,000 compared to less than one in ten (7%) in 2016.

However, the report also noted the impact cybersecurity jobs have on workers well-being, despite their high wages.

Over half (55%) of respondents told CIISec that the stress of their jobs kept them awake at night, while 39% said they feat suffering a heart attack due to their jobs.

Nearly a quarter (21%) of security professionals said they were “overworked.”

The main complaint over operational challenges among cyber professionals were people (72%), likely driven by skills shortages and a lack of proper cybersecurity training. Process (17%) and technology (11%) trailed in comparison to the human factor.

Further, the sector is struggling to attract diverse talent, with only 19% of professionals coming into cybersecurity without a degree, and only 10% being women.

Retention also appears to be an issue, as only 41% of cybersecurity professionals think they will be in the same role in two years, likely driven by burnout.

“If the cybersecurity industry wants to attract and keep its talent, it must diversify recruitment practices, hiring based on skills rather than experience or qualifications,” said CIISec CEO Amanda Finch said.

“Issues such as stress and career progression will also need to be addressed to help retain staff. With an ever-widening skills gap and more advanced threats driven by AI, failing to attract talent to the industry will hinder efforts to make the world a safer place, both today and in the future.”

Recommended reading

• Report: Vulnerability Exploitation Surge Endangers Cybersecurity
• Cybersecurity Burnout is Costing £102M a Year
• Half of Cybersecurity Professionals Expect to Burnout Within the Next Year

When it comes to AI, cybersecurity professions seem capable of seeing both sides of its implications for cyber – 89% claim it will benefit adversaries, something we are already seeing today, and 71% saying it will have a positive impact on defending networks.

AI is already being used to improve the effectiveness of social engineering campaigns, but is also continually employed by cyber professionals for defence.

Despite these two things being true at the same time, and 85% of professions considering using the technology for work, nearly half (44%) think their organisation remains unaware of the risks associated with AI and does not have policies in place to ensure it is safe.