Salary Survey Extra is a series of periodic dispatches that give added insight into the findings of our most recent Salary Survey. These posts contain previously unpublished Salary Survey data.
In the real world, Risky Business is a movie starring young Tom Cruise. Businesses across every sector of commerce spend extravagantly to mitigate both the possibility of risk and its very real effects. With IT so deeply embedded in almost every aspect the business world, IT risk mitigation is of towering importance.
So it stands very much to reason that any individual who specializes in IT risk management would be a hot commodity. The Certified in Risk and Information Systems Control (CRISC) credential offered by cybersecurity and IT governance professional association ISACA looked down at everyone else from the pinnacle of last year's Salary Survey 75 list, and here it is again at No. 1.
Here’s what the salary picture looks like for CRISC holders who responded to the Salary Survey:
All U.S. Respondents
Average Annual Salary: $156,390
Median Annual Salary: $152,840
How satisfied are you with your current salary?
Completely Satisfied: 9.1 percent
Very Satisfied: 27.3 percent
Satisfied: 41.4 percent
Not Very Satisfied: 19.2 percent
Not At All Satisfied: 3 percent
All Non-U.S. Respondents
Average Annual Salary: $95,050
Median Annual Salary: $95,000
How satisfied are you with your current salary?
Completely Satisfied: 6.4 percent
Very Satisfied: 20.9 percent
Satisfied: 40 percent
Not Very Satisfied: 28.2 percent
Not At All Satisfied: 4.5 percent
The largest single body of CRISC holders to participate in the survey is made up of U.S. residents (47.3 percent), but we also heard from credential holders in 39 other countries: Albania, Australia, Bangladesh, Bulgaria, Canada, China, Côte d'Ivoire, Cyprus, Czech Republic, Denmark, Dominican Republic, Egypt, Germany, Greece, Hungary, India, Indonesia, Ireland, Italy, Japan, Kuwait, Malaysia, Mexico, Netherlands, New Zealand, Oman, Pakistan, Peru, Russia, Saudi Arabia, Singapore, South Africa, Spain, Sweden, Thailand, Trinidad and Tobago, Uganda, United Arab Emirates, and the United Kingdom.
ISACA is actively involved in opening up the IT industry in general to women and others, and it would appear that those efforts have borne some fruit in recent years: An eye-opening 20.4 percent of CRISC holders who responded to the survey are women. The rest are mostly men (76.8 percent), with a handful of survey participants who prefer not to identify their gender (2.4 percent) and a tiny sliver who are gender variant/nonconforming (0.4 percent). Slightly more than 60 percent of CRISC holders are relatively seasoned professionals, either between the ages of 45 and 54 (37.8 percent), between the ages of 55 and 64 (20.6 percent), or between the ages of 65 and 74 (2.8 percent). The only “youthful” cohorts among the ranks are the 26.8 percent of respondents who are between the ages of 35 and 44, the 11.5 percent between the ages of 25 and 34, and the 0.5 percent between the ages of 19 and 24.
Nearly 95 percent of CRISC holders who responded to the survey have an educational background that includes time spent at a college or university. The highest level of education completed by most CRISC holders is either a master’s degree (56 percent of respondents), bachelor’s degree (30.1 percent), associate’s degree (3.3 percent), professional degree (2.4 percent), or doctorate (2 percent). The outliers are the 4.8 percent of those surveyed who exited the realm of formal education after completing some level of post-high school technical training and the 1.4 percent who topped out with a high school diploma.
A solid 86.7 percent of CRISC holders who participated in the survey are employed full-time, with 3.7 percent holding part-time jobs, 4.6 percent on sabbatical, 2.1 percent who are students, and 2.9 percent who are not employed. Among those with full-time jobs, there’s a strong possibility of some extra hours at work: 42.9 percent of those surveyed work between 41 and 50 hours per week, and 16.3 percent are actively at work for more than 50 hours per week. Just 26.8 percent of respondents have a traditional 40-hour work week, while 9.6 percent are fortunate enough to work between 31 and 39 hours per week, and 2.4 percent have a full-time work schedule of between 20 and 30 hours per week.
In the COVID era, close to 40 percent of CRISC holders who participated in the survey are spending their entire work schedule outside of a traditional office setting, putting in either 40 hours per week at home (17.8 percent) or more than 40 hours per week (21.6 percent). Additionally, 12 percent work from home for either between 31 and 39 hours per week or between 21 and 30 hours per week (13 percent). The remaining 35 percent of respondents still commute to a traditional workplace for at least half of the time that they’re on the clock, working from home either between 10 and 20 hours per week (18.3 percent) or fewer than 10 hours per week (17.3 percent).
In terms of workplace standing, the largest single group of CRISC holders we heard from are employed at the manager level (22.9 percent). The rest, in descending order, are either directors (21.2 percent), senior specialists (20 percent), senior managers (18.8 percent), executives (7.3 percent), specialists (6.5 percent), or rank-and-file employees (3.3 percent).
A substantial 63.3 percent of CRISC holders who responded to the survey are IT veterans, having worked in a role that directly utilizes one or more of their certified skills for more than a decade. The rest have been plying their certified skills for either between zero years (1 to 11 months) and 2 years (2.8 percent), between 3 and 5 years (11.4 percent), between 6 and 8 years (14.7 percent), or between 9 and 10 years (7.8 percent).
Finally, here’s the view of CRISC holders on key questions from the survey about how certification impacts job performance:
At my current job I use skills learned or enhanced through certification:
Several times a day: 56.4 percent
Several times a week: 27.3 percent
Several times a month: 6.5 percent
Occasionally: 5.3 percent
Rarely: 4.5 percent
Since becoming certified, I feel there is greater demand for my skills.
Strongly agree: 42.8 percent
Agree: 33.9 percent
Neither Agree nor Disagree: 16.3 percent
Disagree: 4.1 percent
Strongly Disagree: 2.9 percent
Becoming certified has increased my problem-solving skills.
Strongly agree: 33.1 percent
Agree: 40 percent
Neither Agree nor Disagree: 17.6 percent
Disagree: 6.1 percent
Strongly Disagree: 3.2 percent
Becoming certified has increased my workplace productivity.
Strongly agree: 31.4 percent
Agree: 33.5 percent
Neither Agree nor Disagree: 25.3 percent
Disagree: 4.1 percent
Strongly Disagree: 5.7 percent
PAST CRISC DEEP FOCUS FEATURES
Certification Magazine was launched in 1999 and remained in print until mid-2008. Publication was restarted on a quarterly basis in February 2014. Subscribe to CertMag here.
Important Update: We have updated our Privacy Policy to comply with the California Consumer Privacy Act (CCPA)
