GRC Contract Job Trends

Governance, Risk Management and Compliance (GRC)
UK

The table below provides summary statistics and contractor rates for jobs requiring GRC skills. It covers contract job vacancies from the 6 months leading up to 23 September 2026, with comparisons to the same periods in the previous two years.

6 months to
23 Sep 2026
Same period 2025 Same period 2024
Rank 275 381 437
Rank change year-on-year +106 +56 +25
Contract jobs citing GRC 503 173 128
As % of all contract jobs in the UK 0.92% 0.53% 0.34%
As % of the Quality Assurance & Compliance category 5.22% 3.08% 2.53%
Number of daily rates quoted 325 94 81
10th Percentile £413 £350 £370
25th Percentile £474 £409 £450
Median daily rate (50th Percentile) £564 £513 £575
Median % change year-on-year +10.05% -10.87% -
75th Percentile £650 £592 £656
90th Percentile £770 £660 £775
UK excluding London median daily rate £525 £424 £500
% change year-on-year +23.89% -15.25% -9.09%
Number of hourly rates quoted 16 13 0
10th Percentile - - -
25th Percentile £64.09 - -
Median hourly rate £76.00 £33.50 -
Median % change year-on-year +126.87% - -
75th Percentile £85.00 - -
90th Percentile £90.50 £58.97 -
UK excluding London median hourly rate £76.00 £33.50 -
% change year-on-year +126.87% - -

All Quality Assurance and Compliance Skills
UK

GRC falls under the Quality Assurance and Compliance category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring quality assurance or compliance skills.

Contract vacancies with a requirement for quality assurance or compliance skills 9,644 5,626 5,052
As % of all contract IT jobs advertised in the UK 17.58% 17.21% 13.41%
Number of daily rates quoted 6,076 3,605 2,983
10th Percentile £325 £300 £281
25th Percentile £413 £400 £400
Median daily rate (50th Percentile) £500 £500 £507
Median % change year-on-year - -1.38% -3.43%
75th Percentile £600 £610 £625
90th Percentile £700 £710 £738
UK excluding London median daily rate £488 £475 £475
% change year-on-year +2.63% - -5.00%
Number of hourly rates quoted 632 265 248
10th Percentile £13.92 £13.60 £12.41
25th Percentile £16.60 £16.92 £15.24
Median hourly rate £32.50 £30.00 £27.50
Median % change year-on-year +8.33% +9.09% -22.54%
75th Percentile £67.50 £60.00 £61.50
90th Percentile £75.90 £81.65 £70.00
UK excluding London median hourly rate £33.00 £27.53 £27.50
% change year-on-year +19.87% +0.11% -26.67%

GRC
Job Vacancy Trend

Historical trend showing the proportion of contract IT job postings citing GRC relative to all contract IT jobs advertised.

GRC job vacancy trend in the UK

GRC
Daily Rate Trend

Contractor daily rate distribution trend for jobs in the UK citing GRC.

Contractor daily rate distribution trend for jobs in the UK citing GRC

GRC
Daily Rate Histogram

Daily rate distribution for jobs citing GRC over the 6 months to 23 September 2026.

Daily rate histogram for GRC in the UK

GRC
Hourly Rate Trend

Contractor hourly rate distribution trend for jobs in the UK citing GRC.

Contractor hourly rate distribution trend for jobs in the UK citing GRC

GRC
Hourly Rate Histogram

Hourly rate distribution of jobs citing GRC over the 6 months to 23 September 2026.

Hourly rate histogram for GRC in the UK

GRC
Top 14 Contract Job Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing GRC within the UK over the 6 months to 23 September 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England +99 450 £565 +10.24% 562
London +59 232 £600 +14.29% 304
UK excluding London +22 221 £525 +23.89% 285
Work from Home +28 134 £550 +29.79% 275
North of England -15 84 £535 +22.34% 98
South East -6 68 £525 +5.00% 80
North West -4 61 £550 +31.89% 55
Midlands -32 35 £575 +43.75% 31
West Midlands -10 33 £580 +0.87% 25
Scotland -2 22 £533 +33.25% 19
Yorkshire -26 22 £475 -9.52% 39
South West -43 13 £600 - 31
East of England -30 6 £650 +23.81% 16
East Midlands -32 2 £402 +0.50% 6

GRC
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 28 (5.57%) SAS
2 12 (2.39%) Confluence
3 10 (1.99%) IIS
4 7 (1.39%) SharePoint
5 1 (0.20%) Apache Airflow
5 1 (0.20%) Apache Spark
5 1 (0.20%) Microsoft Exchange
5 1 (0.20%) NetWeaver
5 1 (0.20%) Oracle Coherence
Applications
1 14 (2.78%) Microsoft Excel
2 10 (1.99%) Microsoft PowerPoint
3 8 (1.59%) Microsoft Office
3 8 (1.59%) MS Visio
4 1 (0.20%) InfoPath
Business Applications
1 45 (8.95%) SAP GRC
2 43 (8.55%) SAP S/4HANA
3 3 (0.60%) SAP FI
4 2 (0.40%) Oracle Payables
4 2 (0.40%) SAP CO
4 2 (0.40%) SAP FI/CO
5 1 (0.20%) Oracle ERP
5 1 (0.20%) SAP CCM
5 1 (0.20%) SAP FI-AR
5 1 (0.20%) SAP FI-GL
5 1 (0.20%) SAP MM
5 1 (0.20%) Workfront
Cloud Services
1 82 (16.30%) Azure
2 54 (10.74%) AWS
3 25 (4.97%) GCP
4 18 (3.58%) SaaS
5 17 (3.38%) Power Platform
6 16 (3.18%) Microsoft 365
7 15 (2.98%) Entra ID
8 11 (2.19%) Microsoft Copilot
9 10 (1.99%) Azure DevOps
10 7 (1.39%) Azure Key Vault
10 7 (1.39%) Azure Sentinel
10 7 (1.39%) GitHub
10 7 (1.39%) Microsoft Purview
10 7 (1.39%) Tricentis Tosca
11 5 (0.99%) Azure Synapse Analytics
12 4 (0.80%) Copilot Studio
12 4 (0.80%) Dynamics 365
12 4 (0.80%) GitHub Actions
12 4 (0.80%) Power Automate
12 4 (0.80%) Snowflake
Communications & Networking
1 13 (2.58%) Network Security
2 5 (0.99%) Firewall
2 5 (0.99%) HTTPS
3 4 (0.80%) Cisco IPT
4 3 (0.60%) LAN
4 3 (0.60%) WAN
5 2 (0.40%) Internet
5 2 (0.40%) NGFW
6 1 (0.20%) HTTP
6 1 (0.20%) Intrusion Detection
6 1 (0.20%) VPN
Database & Business Intelligence
1 17 (3.38%) Power BI
2 8 (1.59%) Power Query
3 7 (1.39%) Data Lake
3 7 (1.39%) Data Warehouse
3 7 (1.39%) SAP BW
4 5 (0.99%) SAP HANA
5 4 (0.80%) Metadata
6 3 (0.60%) Data Mining
7 2 (0.40%) PostgreSQL
7 2 (0.40%) SQL Server
8 1 (0.20%) Amazon QuickSight
8 1 (0.20%) Delta Lake
8 1 (0.20%) OLAP
8 1 (0.20%) OLTP
8 1 (0.20%) Parquet
8 1 (0.20%) Pinecone
8 1 (0.20%) Relational Database
8 1 (0.20%) Weaviate
Development Applications
1 19 (3.78%) JIRA
2 8 (1.59%) Git
3 3 (0.60%) Zephyr
4 2 (0.40%) Claude Code
4 2 (0.40%) Jenkins
4 2 (0.40%) Tricentis qTest
5 1 (0.20%) Cypress.io
5 1 (0.20%) GitLab
5 1 (0.20%) Hudson
5 1 (0.20%) Jaeger
5 1 (0.20%) JMeter
5 1 (0.20%) Postman
5 1 (0.20%) Selenium
5 1 (0.20%) Snyk
General
1 173 (34.39%) Social Skills
2 127 (25.25%) Finance
3 65 (12.92%) Analytical Skills
4 50 (9.94%) Legal
5 47 (9.34%) Banking
6 44 (8.75%) Public Sector
7 21 (4.17%) Influencing Skills
7 21 (4.17%) Telecoms
8 17 (3.38%) Documentation Skills
9 16 (3.18%) Aerospace
10 13 (2.58%) Organisational Skills
11 10 (1.99%) Pharmaceutical
11 10 (1.99%) Presentation Skills
12 9 (1.79%) Law
13 6 (1.19%) Inclusion and Diversity
14 5 (0.99%) General Ledger
14 5 (0.99%) Manufacturing
14 5 (0.99%) Military
15 4 (0.80%) Police
16 3 (0.60%) Retail
Job Titles
1 84 (16.70%) Architect
1 84 (16.70%) Consultant
2 76 (15.11%) Analyst
3 50 (9.94%) Lead
4 44 (8.75%) Security Consultant
5 33 (6.56%) Security Architect
6 30 (5.96%) Senior
7 24 (4.77%) Security Analyst
8 22 (4.37%) Cybersecurity Consultant
8 22 (4.37%) Project Manager
9 18 (3.58%) IT Manager
10 15 (2.98%) SAP Consultant
11 14 (2.78%) Business Analyst
11 14 (2.78%) Cybersecurity Analyst
11 14 (2.78%) Security Manager
12 12 (2.39%) Compliance Analyst
12 12 (2.39%) Delivery Manager
12 12 (2.39%) Developer
13 11 (2.19%) Risk Manager
13 11 (2.19%) SAP GRC Consultant
Libraries, Frameworks & Software Standards
1 30 (5.96%) SAP Fiori
2 25 (4.97%) REST
3 12 (2.39%) SOAP
4 9 (1.79%) Middleware
5 5 (0.99%) JSON
5 5 (0.99%) LDAP
5 5 (0.99%) Terraform
5 5 (0.99%) XML
6 4 (0.80%) Web Services
7 3 (0.60%) SailPoint
8 2 (0.40%) .NET
8 2 (0.40%) ADO
8 2 (0.40%) CSS
8 2 (0.40%) FastAPI
8 2 (0.40%) HTML
8 2 (0.40%) Kafka
8 2 (0.40%) OpenTelemetry
8 2 (0.40%) Oracle Fusion
8 2 (0.40%) Playwright
9 1 (0.20%) RESTful
Miscellaneous
1 53 (10.54%) Onboarding
2 31 (6.16%) Management Information System
3 26 (5.17%) Security Posture
4 19 (3.78%) CMDB
4 19 (3.78%) Operational Technology
5 18 (3.58%) Cloud Native
6 15 (2.98%) Product Ownership
7 13 (2.58%) Data Centre
7 13 (2.58%) Enterprise Software
8 9 (1.79%) AI Agents
9 7 (1.39%) Cyber Threat
9 7 (1.39%) Legacy Systems
9 7 (1.39%) PKI
9 7 (1.39%) Taxonomies
10 6 (1.19%) Data Structures
11 5 (0.99%) Embedded Systems
11 5 (0.99%) Mobile Payment
11 5 (0.99%) Security Operations Centre
11 5 (0.99%) Smartcard
12 4 (0.80%) Analytical Mindset
Operating Systems
1 17 (3.38%) Linux
2 16 (3.18%) Windows
3 6 (1.19%) Windows Server
4 5 (0.99%) AIX
4 5 (0.99%) HPUX
4 5 (0.99%) Oracle Linux
4 5 (0.99%) Red Hat Enterprise Linux
4 5 (0.99%) Solaris
4 5 (0.99%) SUSE
4 5 (0.99%) Unix
5 1 (0.20%) Android
5 1 (0.20%) Apple iOS
Processes & Methodologies
1 205 (40.76%) Risk Management
2 199 (39.56%) Cybersecurity
3 160 (31.81%) Stakeholder Management
4 122 (24.25%) Information Security
5 103 (20.48%) Stakeholder Engagement
6 98 (19.48%) Continuous Improvement
7 73 (14.51%) Agile
8 72 (14.31%) Problem-Solving
9 68 (13.52%) Decision-Making
10 65 (12.92%) Analytics
10 65 (12.92%) Vulnerability Management
11 57 (11.33%) Roadmaps
12 54 (10.74%) Data Protection
13 50 (9.94%) Enterprise Architecture
14 48 (9.54%) AI
14 48 (9.54%) Security Operations
15 46 (9.15%) Security Architecture
16 43 (8.55%) Regulatory Compliance
16 43 (8.55%) Service Management
17 42 (8.35%) Migration
Programming Languages
1 12 (2.39%) JavaScript
2 8 (1.59%) SQL
3 6 (1.19%) Python
4 5 (0.99%) Data Analysis Expressions
4 5 (0.99%) Korn
5 4 (0.80%) Bicep
6 2 (0.40%) PowerShell
7 1 (0.20%) Bash
7 1 (0.20%) C#
7 1 (0.20%) Go
7 1 (0.20%) Java
7 1 (0.20%) TypeScript
Qualifications
1 170 (33.80%) Security Cleared
2 135 (26.84%) SC Cleared
3 72 (14.31%) CISSP
4 57 (11.33%) CISM
5 31 (6.16%) CRISC
6 30 (5.96%) Degree
7 26 (5.17%) CISA
8 24 (4.77%) DV Cleared
9 16 (3.18%) Cisco Certification
9 16 (3.18%) PMI Certification
10 15 (2.98%) (ISC)2 CCSP
10 15 (2.98%) PMP
11 12 (2.39%) CCSP
12 11 (2.19%) Azure Certification
13 10 (1.99%) BPSS Clearance
13 10 (1.99%) ISO 27001 Lead Implementer
14 9 (1.79%) ISO 27001 Lead Auditor
15 7 (1.39%) CompTIA Security+
16 5 (0.99%) IISP
16 5 (0.99%) RHCE
Quality Assurance & Compliance
1 143 (28.43%) ISO/IEC 27001
2 127 (25.25%) NIST
3 48 (9.54%) GDPR
4 41 (8.15%) NCSC
5 27 (5.37%) Cyber Essentials
6 25 (4.97%) QA
7 21 (4.17%) PCI DSS
8 20 (3.98%) Data Quality
9 19 (3.78%) Sarbanes-Oxley
10 16 (3.18%) Cyber Essentials PLUS
11 11 (2.19%) COBIT
12 10 (1.99%) NIST 800
13 9 (1.79%) ISO/IEC 27005
14 8 (1.59%) ITGC
14 8 (1.59%) SOC 2
15 7 (1.39%) ISO 31000
16 6 (1.19%) JSP 440
17 5 (0.99%) Government Security Classifications
17 5 (0.99%) HIPAA
17 5 (0.99%) ISO 9001
System Software
1 12 (2.39%) Active Directory
2 8 (1.59%) IAG
3 4 (0.80%) ISA Server
4 3 (0.60%) VMware Infrastructure
4 3 (0.60%) vSphere
5 2 (0.40%) Docker
5 2 (0.40%) Hyper-V
Systems Management
1 5 (0.99%) CASB
1 5 (0.99%) Kubernetes
2 2 (0.40%) Grafana
2 2 (0.40%) RSA Archer
2 2 (0.40%) Single Sign-On
3 1 (0.20%) Control-M
3 1 (0.20%) Istio
3 1 (0.20%) Nessus
3 1 (0.20%) Prometheus
3 1 (0.20%) QRadar
3 1 (0.20%) Rancher
3 1 (0.20%) SCCM
Vendors
1 68 (13.52%) ServiceNow
2 63 (12.52%) Microsoft
3 52 (10.34%) SAP
4 44 (8.75%) Oracle
5 10 (1.99%) Google
6 8 (1.59%) CyberArk
7 7 (1.39%) Databricks
7 7 (1.39%) OpenAI
8 6 (1.19%) Red Hat
9 5 (0.99%) Atlassian
9 5 (0.99%) Cisco
9 5 (0.99%) CrowdStrike
9 5 (0.99%) F5
9 5 (0.99%) HP
9 5 (0.99%) Palo Alto
9 5 (0.99%) Splunk
10 4 (0.80%) Centrify
10 4 (0.80%) Qualys
10 4 (0.80%) Snow
10 4 (0.80%) Tripwire