How to Compare a Cyber Security Salary Offer Using the Salary Index

What is a cyber security salary?

When you read a job ad for a cyber security role, the salary figure is the annual gross pay before tax and super. It might be listed as a range like $110,000–$140,000. The keyword "cyber security salary" covers everything from entry-level analysts to chief information security officers. But unlike some jobs, there is no single award rate from the Fair Work Ombudsman or Fair Work Commission that tells you what a cyber security professional must be paid. The search for a specific award returned the Modern Awards Pay Database, which lists rates for security officers under the Security Services Industry Award – a completely different occupation. Cyber security is a professional field, not a security guard role.

Using the Salary Index to compare offers

Without a standard award rate, how do you know if a cyber security salary is fair? The Salary Index gives you a consistent benchmark. The national line is set at 100, which equals full-time adult ordinary-time earnings of $108,352 per year (based on ABS Average Weekly Earnings, May 2026). Any salary can be converted to an index number: divide the annual gross by $108,352 and multiply by 100. For example, a $120,000 offer gives an index of 110.8. That means it's 10.8% above the national average. You can then compare that to relevant industry and state indices.

Where the search took us

The web search for "cyber security salary" using Fair Work sources did not return a specific figure. The Security Services Industry Award covers security officers, not cyber security analysts. The pay guide for that award shows rates like $28.42 per hour for a Level 1 security officer – clearly not relevant for cyber security. This is because cyber security roles are typically classified under the Professional, Scientific and Technical Services industry, or they fall under the Professional Employees Award 2020. However, that award's rates are not publicly summarised in the same simple table, and many cyber security jobs are covered by enterprise agreements or individual contracts that pay well above any award minimum.

Industry benchmarks

Even without a specific award, you can use the industry index. The Professional, Scientific and Technical Services industry has an index of 114.7, which annualises to about $124,200. This is a useful proxy for many cyber security roles, especially those in consulting firms, technology companies, or in-house security teams. If your offer is below that index, it may be below the typical professional services salary. But remember, this is an average across all roles in that industry, including junior and senior positions. A graduate cyber security analyst might earn less, while a senior security architect could earn well above.

State indices also matter. For example, the ACT index is 109.9 (annualised $119,090), reflecting higher public sector and consulting salaries. Western Australia's index is 106.9 ($115,825) due to mining and resources. If you're comparing offers in different states, the index helps normalise for location. See the states page for more detail.

Example comparison

Imagine you receive two job offers:

• Offer A: $115,000 in Sydney (NSW index 101.2)
• Offer B: $125,000 in Canberra (ACT index 109.9)

Calculate indices:

• Offer A: 115,000 ÷ 108,352 × 100 = 106.1
• Offer B: 125,000 ÷ 108,352 × 100 = 115.4

Now compare to the industry index (114.7). Offer A is below the professional average, while Offer B is slightly above. But also consider the state indices: Offer A is above NSW's 101.2, so it's good relative to the state average. Offer B is above ACT's 109.9, also good. The index lets you see both national and local context.

Tax and super considerations

Remember that the salary figure in the ad is usually base salary, not including superannuation. From 1 July 2026, the super guarantee is 12%, so on a $120,000 salary, your employer must contribute an extra $14,400 to your super fund. That's on top of the $120,000. When comparing offers, check whether the ad includes super in the figure (a "package") or excludes it. The Salary Index uses gross ordinary-time earnings, which excludes super, so use the base salary for the index calculation.

Tax also affects take-home pay. For 2026–27, the tax rates are: nil up to $18,200; 15% from $18,201 to $45,000; 30% from $45,001 to $135,000; 37% from $135,001 to $190,000; and 45% above $190,000. Plus a 2% Medicare levy. A $120,000 salary would have a tax estimate of about $26,000 plus Medicare, leaving around $91,600 after tax (ignoring HELP or other deductions). The how the index works page explains the relationship between gross and net.

Putting it together

When you see a cyber security salary in a job ad, don't look for a single "correct" figure. Instead, use the Salary Index to position it against the national line, the professional industry average, and your state. The index turns any salary into a comparable number. For example, a $130,000 offer gives an index of 120.0 – well above the professional average of 114.7. That's a strong offer. A $95,000 offer gives an index of 87.7 – below the national average, but might be reasonable for a junior role in a low-cost state.

If you want to explore further, the Salary Index homepage has the full list of industry and state indices. The industries page breaks down sectors like Information Media and Telecommunications (index 100.6) which may also be relevant for some cyber security roles. And remember, the index is a benchmark, not a guarantee. Always consider the total package, including super, bonuses, and non-salary benefits.

Final thought

The absence of a specific cyber security salary in public awards is not a problem – it reflects the nature of the profession. Cyber security is a specialised, in-demand field where pay is set by market forces, not awards. The Salary Index gives you the tools to compare any offer rationally, whether you're reading a job ad or negotiating a raise. Use it to see where your salary sits against the national line, and make informed decisions.