A growing gap between private and public sector salaries for cybersecurity professionals is undermining the UK’s national security, according to new research by Naoris Protocol.
The blockchain-based cyber firm warns that talented cyber experts are turning away from government roles due to lower pay, just as emerging technologies — from AI and quantum computing to the metaverse — are expanding the scale of cyber threats facing critical national infrastructure.
Naoris Protocol’s analysis highlights that mid-tier private sector cybersecurity positions, such as Cyber Security Analysts or Penetration Testers in London, can command annual salaries of £50,000 to £70,000. Senior roles, including Security Managers and Cyber Security Architects, often exceed £120,000. By contrast, a Cyber Security Adviser at the Ministry of Defence was recently advertised at only £36,530 a year, while a Head of Cyber Governance, Risk, and Compliance post started at £67,820.
The research cites a Spotlight on Corruption report revealing that low pay has resulted in unfilled cyber roles within the National Crime Agency, driving skilled employees into better-paying positions with the police or in the private sector. Further concerns come from the National Audit Office (NAO), which found “significant gaps” in the cyber resilience of 58 government IT systems and warned that one in three cybersecurity posts remained vacant or staffed by temporary workers in 2023/24.
David Carvalho, Chief Executive and Founder of Naoris Protocol, believes closing the pay gap is critical to defending the UK’s digital assets. “The risks to UK national security from cybercrime are real, and the potential damage to critical national infrastructure is staggering,” he said. “Competitive pay is essential to attract the talent needed to combat these evolving threats.”
With government agencies competing directly against the private sector for highly specialised skills, experts say the UK’s broader economic and security interests depend on boosting salaries to secure the nation’s cybersecurity defences.
