12Sep 2026

CISO Median £117,000: Highest Paid Security Jobs in the UK

UK security leader in operations suite

The highest paid security jobs in the UK are almost all in cyber security, led by the chief information security officer, cyber security architect, and senior penetration tester. Cyber specialisms consistently out-earn physical security roles because the skills gap runs deeper and demand is growing faster than supply. Physical security still has its own high earners, though. Close protection officers working for high-net-worth clients and senior security directors in regulated industries can push into six-figure territory too.

TL;DR:

  • Physical security jobs such as close protection officers can charge daily rates of £300 to £600, which may surpass some lower-end cyber salaries when annualized, but generally pay less overall.
  • Sector, specialism, security clearance, and leadership position significantly influence higher salaries, with finance, defense, and government sectors offering premium pay.
  • Contracting senior technical experts can earn £450 to £800 daily, often outperforming permanent top-tier cybersecurity roles in gross income, with added flexibility but less job security.
  • Salary variation depends heavily on company size, sector regulation, and regional differences, especially between London, the South East, and other UK regions.
Securityjobsboard
Find Your Next Security Role
Explore UK security vacancies, create a profile, upload your CV, set job alerts, and apply quickly to relevant opportunities.
Explore security jobs

Table of Contents

What are the highest paid security jobs in the UK?

At the very top sits the chief information security officer (CISO), the executive who owns an organisation’s entire security strategy. Median UK pay lands around £117,000, though Harvey Nash’s benchmarking work for Computing shows some CISOs at large employers earning considerably more once bonuses and equity are counted. That spread between median and upper-end figures is worth remembering: a CISO at a mid-sized retailer and one at a global bank are doing very different jobs under the same title.

Just below that, several cyber roles cluster in a similarly rich band.

  • Chief security officer (CSO): Broader remit than a CISO, often covering physical and information security together. Typically in the range of low to mid six figures in large organisations, with defence, aviation and critical infrastructure paying at the top.
  • Cyber security architect: Designs the systems and controls that keep networks defensible. Salaries commonly run £70,000 to £130,000, rising fastest for those who can prove hands-on cloud and zero-trust design experience.
  • Cloud security engineer: One of the sharpest pay-growth curves in the sector right now. Expect salaries ranging approximately from the high tens of thousands to a bit above one hundred thousand pounds, with AWS, Azure or Google Cloud security certifications acting as a genuine salary lever rather than a nice-to-have.
  • Security operations centre (SOC) manager: Runs the team watching for live threats around the clock. Typically salaries range from approximately sixty-five thousand to about one hundred thousand pounds, higher in finance and telecoms where SOCs run 24/7 and carry serious regulatory weight.
  • Senior penetration tester (ethical hacker): Breaks systems for a living, professionally. Salaries fall roughly between the mid five figures and just under one hundred thousand pounds in permanent roles, but day rates for contractors regularly exceed that on an annualised basis (more on this below).
  • Cyber security consultant: Advises multiple clients rather than one employer, often through a consultancy. Salaries generally range from fifty to ninety thousand pounds annually in permanent roles, with senior partners at the big consultancies earning well beyond that.

Physical security has its own ceiling, and it’s higher than most people assume.

  • Close protection officer (CPO): Bodyguard work for executives, celebrities or dignitaries. UK day rates for experienced, licensed CPOs can reach £300 to £600 a day on close-protection contracts, though most work is project-based rather than salaried.
  • CCTV operator: Sits at the other end of the scale, typically £22,000 to £28,000 for standard monitoring roles, rising for control-room supervisors or specialist retail-crime analysts.

The gap between a CCTV operator and a CISO is stark, and it tells you exactly where the money in this industry has moved. Birmingham City University’s rundown of top-paid cyber roles lands on almost the same shortlist: CISO, architect, senior pentester and SOC manager as the recurring high earners, which suggests this isn’t a quirk of one salary survey but a consistent pattern across the market.

How do security salaries compare by role?

Role Indicative UK salary range Seniority Typical employers/sectors
Chief information security officer approximately one hundred thousand to over two hundred thousand pounds Executive Finance, tech, large enterprise
Chief security officer roughly one hundred thousand to one hundred sixty thousand pounds Executive Defence, aviation, critical infrastructure
Cyber security architect £70,000 to £130,000 Senior Consultancies, finance, government
Cloud security engineer roughly sixty thousand to one hundred ten thousand pounds Mid to senior Tech, retail, finance
SOC manager approximately sixty-five thousand to one hundred thousand pounds Senior Telecoms, finance, MSPs
Senior penetration tester between approximately fifty-five thousand and ninety-five thousand pounds Senior Consultancies, defence, finance
Cyber security consultant from about fifty thousand to ninety thousand pounds Mid to senior Consultancies, public sector
Close protection officer Day rate £300 to £600 Specialist Private clients, VIP security
CCTV operator around twenty-two to twenty-eight thousand pounds Entry to mid Retail, transport, local authorities

The wide CISO range is the number to sit with. A £100,000 gap between the low and high end of the UK’s top security job is not a typo. It reflects company size, sector regulation and whether bonuses and equity are included, and it’s the single clearest sign that title alone tells you very little about pay in this market.

What drives higher pay in security roles?

Four levers matter more than years of service alone.

  • Specialism over generalism. Deep technical skill in cloud security, application security or threat intelligence pays more than broad, unspecialised experience.
  • Sector premium. Finance, defence and government pay noticeably more than retail or hospitality for equivalent titles, largely because the stakes of a breach are higher.
  • Security clearance. SC and DV clearance narrows the candidate pool sharply, and employers pay a premium for people who already hold it rather than wait months for vetting.
  • Leadership versus technical track. Moving into people management (SOC manager, CISO) pays differently to staying purely technical (architect, pentester), and neither path is automatically better paid than the other.

Pro Tip: If you’re choosing between a technical certification and a management course this year, check which one your target sector actually rewards first; defence and government pay clearance and specialism premiums, while commercial finance often rewards leadership scope instead.

How do you move into a higher-paid security role?

  1. Map certifications to your target role. CISSP and CISM for leadership tracks, CREST or CHECK for penetration testing, and cloud-provider security certifications (AWS, Azure, GCP) for cloud engineering.
  2. Build a visible track record. Contribute to open-source security tools, take part in public bug bounty programmes, or publish write-ups of your own research. Employers hiring for senior roles want proof, not just a certificate.
  3. Take lateral moves inside your organisation. A secondment into a SOC team or a cross-department cloud migration project often teaches more than a course, and it’s free.
  4. Target sectors that pay premiums. Finance, defence and critical infrastructure consistently pay more for the same skill set than retail or general commercial roles.
  5. Negotiate with evidence, not hope. Bring salary benchmarking data to the table rather than a vague sense you’re underpaid; a documented salary guide for your role and region carries far more weight than a gut feeling.

Pro Tip: Contractors and permanent staff should each check the going day rate for their exact specialism before any pay conversation. A stale figure from two years ago undersells you badly in a market moving this fast.

Permanent salary vs contracting: which pays more?

Permanent roles offer a fixed salary plus bonus, pension and benefits. Contracting strips most of that away in exchange for a higher headline rate, and for senior technical specialists the maths often favours contracting.

  • Senior pentesters and architects working as contractors typically command £450 to £800 a day, which annualises well above most permanent equivalents even accounting for gaps between contracts.
  • CISOs on interim contracts for organisations in crisis or transition can command daily rates far exceeding their permanent-role equivalent, though these engagements are typically short and unstable.
  • Tax and benefits trade-off. Contracting income is usually higher gross but comes without holiday pay, sick pay, pension contributions or job security, so the real comparison needs to account for all of that, not just the day rate.

The £450 to £800 day-rate band for senior technical contractors is the figure worth remembering. At the top of that range, a contractor working consistently can out-earn a permanent CISO on paper, even though the risk profile is completely different.

Where does this salary data come from?

These figures draw on 2026 UK labour market data from the Office for National Statistics, Harvey Nash’s IT salary benchmarking reported by Computing, PayMetric Labs’ median executive pay data, and specialist career guides covering contractor day rates and senior role bands. Security Jobs Board cross-checks these ranges against live vacancy data on its own job market and career outlook page, an approach backed by BSIA affiliation.

Executive pay in particular shows wide variance across surveys. Report both the median and the upper-end figure rather than one headline number, because a single CISO salary quoted without context can mislead as easily as it can inform.

Regional variation matters too. London and the South East consistently pay more across almost every role in this list, and sample sizes for niche specialisms (say, cloud-native security architects) are still small enough that ranges shift year to year. Always check current live vacancies for your specific region and sector before treating any of these bands as fixed.

Should you specialise in cyber or aim for a senior physical security role?

Cyber specialisms offer faster pay upside but demand real technical investment. Physical security still has strong entry pathways and premiums in close protection and CCTV work. The smarter move is balancing certification spend against demonstrable, provable experience, whichever path you choose.

— Rob

Find your next high-paid security role faster

Reading salary bands is one thing. Actually finding the roles paying at the top of them is another, and that’s where Securityjobsboard earns its place in your job search rather than a generic recruitment site. It’s built specifically around the UK security sector, which means senior cyber and physical security vacancies aren’t buried under hundreds of unrelated listings.

Securityjobsboard

You can create a free profile, upload your CV, and set alerts for exactly the roles covered in this guide, whether that’s CISO vacancies, SOC manager positions, or close protection contracts. Applications are quick and free for jobseekers, the platform is GDPR compliant and works properly on mobile, and its BSIA affiliation gives employers and candidates a shared reference point for credibility. If you’re based in or looking at security jobs in Northern Ireland, that regional category page is a good example of how specific the listings get. Set up a free profile today and start filtering for the roles that actually match the pay bands you’ve just read about.

Sources

FAQ

What security job makes the most money?

The chief information security officer typically earns the most in UK security, with median pay around £117,000 and top-end packages at large employers going considerably higher once bonuses are included.

What jobs pay £150,000 a year or more in the UK security sector?

Very few security roles reach this level as a base salary. Senior CISOs at large enterprises, interim CISOs on contract, and top-tier cyber security consultancy partners are among the few roles likely to reach base salaries considerably above £100,000 a year…

How much do senior close protection officers earn?

Experienced close protection officers working private client or corporate contracts typically charge £300 to £600 a day, though this work is usually project based rather than a fixed annual salary.

What jobs pay around £4,000 a month in the UK security sector?

Mid-table security role salaries vary depending on the role, typically matching mid-level SOC analysts, experienced cyber security consultants, and some cloud security engineers earlier in their careers.

Are cyber security jobs really higher paid than physical security roles?

Generally, yes. Senior cyber roles like CISO, architect and SOC manager consistently out-earn most physical security positions, though specialist physical roles such as close protection can close some of that gap through day rates.