The recent deluge of data grabbing cyberattacks on major UK brands has sparked a sharp rise in salary premiums for cybersecurity professionals, as businesses rush to protect themselves from escalating threats – including those linked to rogue state actors.
So says a new study by international recruitment firm Robert Half, which follows attacks on Marks & Spencer (costing the company over £300m in revenue to date), the Co-op, Harrods, Adidas, Victoria’s Secret, Cartier, North Face, Flutter Entertainment and, most recently, Jaguar Land Rover (pictured), which have exposed vulnerabilities even among well-resourced organisations.
The fall-out from such attacks can spread far and wide within an organisation, placing huge strain on numerous departments. Last week, M&S’ chief digital and technology officer Rachel Higham decided to step back from her role, despite the company insisting she had been “a steady hand and calm head at an extraordinary time for the business”.
Robert Half’s data echoes these findings with 42% of employers planning to hire additional tech security experts in the coming months, and 48% stating that cybersecurity is a priority for their immediate hiring needs.
A further 26% will expand permanent headcount in legal, risk, and compliance teams, while 23% are increasing contract resources to bolster resilience and regulatory readiness.
According to Robert Half’s analysis, UK employers are increasingly offering above‑market salary premiums to fill gaps in compliance, governance, security architecture and threat intelligence to stay competitive and attract core talent. Almost two-thirds (63%) of employers indicated that they would be inclined to offer premium salaries if specialist skills are in short supply.
With cybersecurity critical as brands seek to protect critical infrastructure, almost half (44%) of employers have indicated that hiring cybersecurity professionals in the coming months will require premium salaries.
Operational risk managers, for instance, will see an 11.1% increase from £75,375 to £83,750, while senior operational risk managers will get a rise of 9.5% from an average salary of £94,625 to £103,625 in 2026.
In cybersecurity the escalation is even starker – chief information security officers climb from a 2025 average of £150,250 to £171,625 in 2026, representing a 14.2% surge.
Robert Half UK & Ireland senior managing director Matt Weston commented: “In today’s climate, a breach isn’t just an operational failure – it’s a financial and reputational catastrophe.
“With rogue state threats, increasingly sophisticated hacking groups and rising regulation, firms that fail to invest in risk, compliance and security talent will be exposed. We’re seeing salary outlays rise, roles expand in scope and expectations from boards at an all-time high.
“London’s sharp upward trajectory is no accident. Global financial institutions headquartered there face relentless scrutiny from regulators, ever-present geopolitical risks and boardrooms that now see cyber resilience as central to maintaining trust.
The talent pool is not keeping pace with demand – particularly for senior leaders who can blend technical depth with strategic oversight with competition for top performers driving rapid pay inflation.
“Salaries in London City are even higher, reflecting the premium placed on attracting and retaining talent at the very centre of the UK’s financial system. Organisations that build resilience into their DNA – from systems to culture – will be those that survive and thrive in 2026.”
Related stories
‘Steady hand’ Higham decides to quit top M&S tech role
Ransomware fine fuels security warning to all UK firms
M&S faces £300m hit as cyber attack fall-out continues
M&S emails 9.4m customers to warn them of data loss
M&S facing ‘unprecedented’ hack attack class action
Govt wades in as Co-op and M&S cyber attacks escalate
Ransomware victims who pay up are nearly all hit again
UK firms braced for fresh wave of ransomware attacks
Major brands warned over extortion after global attack
