Period
to 26 November 2021

The following table provides summary statistics for permanent job vacancies advertised in England with a requirement for GRC skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited GRC over the 6 months to 26 November 2021 with a comparison to the same period in the previous 2 years.

Governance, Risk Management and Compliance (GRC)
UK > England
6 months to
26 Nov 2021
Same period 2020 Same period 2019
Rank 683 580 719
Rank change year-on-year -103 +139 +115
Permanent jobs citing GRC 354 120 329
As % of all permanent jobs advertised in England 0.31% 0.24% 0.26%
As % of the Quality Assurance & Compliance category 2.05% 1.94% 1.92%
Number of salaries quoted 223 64 232
10th Percentile £47,500 £42,500 £40,000
25th Percentile £55,000 £46,000 £48,438
Median annual salary (50th Percentile) £67,500 £61,500 £67,500
Median % change year-on-year +9.76% -8.89% +3.85%
75th Percentile £82,500 £85,000 £75,000
90th Percentile £95,000 £105,250 £93,625
UK median annual salary £70,000 £60,250 £67,500
% change year-on-year +16.18% -10.74% +3.85%

GRC is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies advertised in England with a requirement for quality assurance or compliance skills.

All Quality Assurance and Compliance Skills
England
Permanent vacancies with a requirement for quality assurance or compliance skills 17,247 6,189 17,180
As % of all permanent IT jobs advertised in England 15.22% 12.46% 13.69%
Number of salaries quoted 11,224 4,937 13,261
10th Percentile £31,250 £31,250 £28,500
25th Percentile £41,250 £41,250 £37,000
Median annual salary (50th Percentile) £55,000 £55,000 £50,000
Median % change year-on-year - +10.00% -
75th Percentile £72,500 £70,000 £67,500
90th Percentile £90,000 £85,000 £83,000
UK median annual salary £55,000 £54,000 £50,000
% change year-on-year +1.85% +8.00% -

GRC
Job Vacancy Trend in England

Job postings citing GRC as a proportion of all IT jobs advertised in England.

Job vacancy trend for GRC in England

GRC
Salary Trend in England

3-month moving average salary quoted in jobs citing GRC in England.

Salary trend for GRC in England

GRC
Salary Histogram in England

Salary distribution for jobs citing GRC in England over the 6 months to 26 November 2021.

Salary histogram for GRC in England

GRC
Job Locations in England

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing GRC within the England region over the 6 months to 26 November 2021. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
London -133 179 £72,500 +11.54% 21
South East -98 68 £67,500 -15.63% 7
Midlands -67 46 £65,000 +18.18% 3
West Midlands -59 32 £65,000 +23.81% 2
North of England -123 25 £55,000 +22.22% 9
North West -75 17 £55,000 +22.22% 7
East Midlands -57 12 £67,500 -8.47% 1
East of England -98 12 £85,000 +51.79% 2
South West -73 10 £70,421 +10.68% 4
Yorkshire -95 8 £55,000 +37.50% 1
GRC
UK

For the 6 months to 26 November 2021, IT jobs citing GRC also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads across the England region with a requirement for GRC.

1 176 (49.72%) Risk Management
2 173 (48.87%) Information Security
3 153 (43.22%) Cybersecurity
4 119 (33.62%) ISO/IEC 27001
5 100 (28.25%) Finance
6 96 (27.12%) Agile Software Development
6 96 (27.12%) Social Skills
7 93 (26.27%) Analytical Skills
8 82 (23.16%) CISSP
9 76 (21.47%) Stakeholder Management
10 67 (18.93%) DevOps
11 65 (18.36%) Azure
11 65 (18.36%) CISM
11 65 (18.36%) NIST
12 64 (18.08%) Legal
13 63 (17.80%) GDPR
14 57 (16.10%) Security Management
15 53 (14.97%) Management Information System
15 53 (14.97%) PCI DSS
16 52 (14.69%) Analytics
16 52 (14.69%) Power BI
16 52 (14.69%) Business Intelligence
16 52 (14.69%) Power Platform
17 50 (14.12%) Data Protection
18 49 (13.84%) SaaS
18 49 (13.84%) Microsoft Excel
19 46 (12.99%) SQL
19 46 (12.99%) COBIT
19 46 (12.99%) Data Analytics
20 45 (12.71%) Data Analysis

GRC
Co-occurring IT Skills in England by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 14 (3.95%) Apache Airflow
1 14 (3.95%) Gunicorn
2 4 (1.13%) Confluence
3 3 (0.85%) NetWeaver
3 3 (0.85%) SharePoint
4 2 (0.56%) IIS
5 1 (0.28%) Appian
Applications
1 49 (13.84%) Microsoft Excel
2 12 (3.39%) Microsoft PowerPoint
3 3 (0.85%) MS Visio
4 2 (0.56%) Microsoft Project
5 1 (0.28%) Microsoft Office
Business Applications
1 8 (2.26%) SAP GRC
1 8 (2.26%) SAP S/4HANA
2 6 (1.69%) SAP FI
3 5 (1.41%) SAP BPC
3 5 (1.41%) SAP CO
3 5 (1.41%) SAP FI/CO
4 3 (0.85%) Oracle ERP
5 2 (0.56%) NetSuite
5 2 (0.56%) Remedy ITSM
5 2 (0.56%) SAP ERP
6 1 (0.28%) Oracle EBS
6 1 (0.28%) Oracle Financials
6 1 (0.28%) Oracle Procure-to-Pay
6 1 (0.28%) SAP Oil and Gas
Cloud Services
1 65 (18.36%) Azure
2 52 (14.69%) Power Platform
3 49 (13.84%) SaaS
4 39 (11.02%) AWS
5 15 (4.24%) Azure Cosmos DB
6 12 (3.39%) Microsoft 365
7 11 (3.11%) GCP
8 4 (1.13%) Cloud Computing
9 2 (0.56%) Azure Sentinel
9 2 (0.56%) Collibra
10 1 (0.28%) Azure Active Directory
10 1 (0.28%) Dynamics 365
10 1 (0.28%) IaaS
10 1 (0.28%) PaaS
10 1 (0.28%) PowerApps
10 1 (0.28%) Slack
Communications & Networking
1 28 (7.91%) Firewall
2 10 (2.82%) Network Security
3 4 (1.13%) DMZ
4 3 (0.85%) TCP/IP
4 3 (0.85%) Wireless
5 2 (0.56%) Broadband
5 2 (0.56%) Intrusion Detection
5 2 (0.56%) SSL
6 1 (0.28%) DNS
6 1 (0.28%) HTTP
6 1 (0.28%) LAN
6 1 (0.28%) SMTP
6 1 (0.28%) WAN
Database & Business Intelligence
1 52 (14.69%) Power BI
2 40 (11.30%) Tableau
3 20 (5.65%) Data Warehouse
4 8 (2.26%) NoSQL
5 5 (1.41%) MongoDB
5 5 (1.41%) SAP HANA
5 5 (1.41%) SQL Server Analysis Services
5 5 (1.41%) SQL Server Integration Services
5 5 (1.41%) SQL Server Reporting Services
6 2 (0.56%) Metadata
6 2 (0.56%) Oracle Reports
7 1 (0.28%) Ataccama
7 1 (0.28%) BusinessObjects Business Intelligence
7 1 (0.28%) SAP BW
7 1 (0.28%) SQL Server
Development Applications
1 7 (1.98%) Git (software)
2 5 (1.41%) JIRA
3 2 (0.56%) Eclipse
General
1 100 (28.25%) Finance
2 96 (27.12%) Social Skills
3 93 (26.27%) Analytical Skills
4 64 (18.08%) Legal
5 26 (7.34%) Public Sector
6 22 (6.21%) Retail
7 15 (4.24%) Banking
8 13 (3.67%) Presentation Skills
9 10 (2.82%) Law
9 10 (2.82%) Telecoms
10 9 (2.54%) Inclusion and Diversity
11 8 (2.26%) Pharmaceutical
12 6 (1.69%) Manufacturing
12 6 (1.69%) Russian Language
13 5 (1.41%) Marketing
14 4 (1.13%) Financial Institution
14 4 (1.13%) Influencing Skills
15 3 (0.85%) Automotive
15 3 (0.85%) Organisational Skills
16 2 (0.56%) Local Government
Job Titles
1 108 (30.51%) Analyst
2 49 (13.84%) Security Analyst
3 48 (13.56%) Consultant
4 40 (11.30%) Security Manager
5 36 (10.17%) Information Analyst
6 35 (9.89%) Information Security Analyst
7 29 (8.19%) Security Consultant
8 22 (6.21%) Product Analyst
9 21 (5.93%) Information Manager
9 21 (5.93%) Information Security Manager
10 19 (5.37%) Data Analyst
10 19 (5.37%) Senior Analyst
10 19 (5.37%) Senior Consultant
11 18 (5.08%) Architect
11 18 (5.08%) Senior Security Analyst
12 17 (4.80%) Risk Manager
13 16 (4.52%) Cloud Engineer
13 16 (4.52%) Senior Information Analyst
13 16 (4.52%) Senior Information Security Analyst
13 16 (4.52%) Senior Security Consultant
Libraries, Frameworks & Software Standards
1 19 (5.37%) REST
2 14 (3.95%) Kafka
2 14 (3.95%) NumPy
2 14 (3.95%) Pandas
2 14 (3.95%) pytest
3 9 (2.54%) JSON
4 8 (2.26%) AngularJS
5 7 (1.98%) RESTful
5 7 (1.98%) XML
6 6 (1.69%) HTML
7 5 (1.41%) SOAP
7 5 (1.41%) Web Services
8 4 (1.13%) HTML5
8 4 (1.13%) jQuery
8 4 (1.13%) SAML
9 3 (0.85%) Middleware
9 3 (0.85%) SAP Fiori
10 2 (0.56%) .NET
10 2 (0.56%) LDAP
10 2 (0.56%) ODBC
Miscellaneous
1 53 (14.97%) Management Information System
2 21 (5.93%) Cyberthreat
3 15 (4.24%) Greenfield Project
3 15 (4.24%) Linux Command Line
4 14 (3.95%) Algorithms
4 14 (3.95%) Data Structures
5 12 (3.39%) Self-Motivation
6 9 (2.54%) Data Protection Act
7 7 (1.98%) Cyberattack
8 6 (1.69%) Distributed Denial-of-Service
9 5 (1.41%) Blog
9 5 (1.41%) e-Learning
10 4 (1.13%) Public Cloud
11 3 (0.85%) Security Operations Centre
11 3 (0.85%) Smart Energy
11 3 (0.85%) User Experience
11 3 (0.85%) Video Conferencing
12 2 (0.56%) Private Cloud
12 2 (0.56%) Social Media
12 2 (0.56%) SWIFT
Operating Systems
1 15 (4.24%) Linux
2 6 (1.69%) Windows
3 1 (0.28%) Unix
3 1 (0.28%) Windows Server
Processes & Methodologies
1 176 (49.72%) Risk Management
2 173 (48.87%) Information Security
3 153 (43.22%) Cybersecurity
4 96 (27.12%) Agile Software Development
5 76 (21.47%) Stakeholder Management
6 67 (18.93%) DevOps
7 57 (16.10%) Security Management
8 52 (14.69%) Analytics
8 52 (14.69%) Business Intelligence
9 50 (14.12%) Data Protection
10 46 (12.99%) Data Analytics
11 45 (12.71%) Data Analysis
11 45 (12.71%) Decision-Making
12 44 (12.43%) DevSecOps
12 44 (12.43%) ISMS
13 41 (11.58%) Security Operations
14 40 (11.30%) Data Modelling
14 40 (11.30%) Data Visualisation
14 40 (11.30%) Mathematics
14 40 (11.30%) Visualisation
Programming Languages
1 46 (12.99%) SQL
2 32 (9.04%) Python
3 23 (6.50%) Bash Shell
4 20 (5.65%) T-SQL
5 19 (5.37%) PowerShell
6 15 (4.24%) Java
7 14 (3.95%) JavaScript
7 14 (3.95%) Kotlin
8 3 (0.85%) ABAP
8 3 (0.85%) C
9 2 (0.56%) C#
9 2 (0.56%) C++
10 1 (0.28%) Perl
10 1 (0.28%) PHP
10 1 (0.28%) R
10 1 (0.28%) SAPscript
Qualifications
1 82 (23.16%) CISSP
2 65 (18.36%) CISM
3 36 (10.17%) Degree
4 35 (9.89%) CISA
5 24 (6.78%) CRISC
6 12 (3.39%) Security Cleared
7 10 (2.82%) PCI QSA
8 9 (2.54%) SANS
9 8 (2.26%) (ISC)2 CCSP
9 8 (2.26%) Cisco Certification
9 8 (2.26%) GIAC
10 7 (1.98%) ISO 27001 Lead Auditor
10 7 (1.98%) SAP Certification
11 6 (1.69%) GSNA
11 6 (1.69%) IRCA
11 6 (1.69%) SC Cleared
12 5 (1.41%) CSSLP
12 5 (1.41%) ISO 27001 Lead Implementer
12 5 (1.41%) Microsoft Certification
12 5 (1.41%) SSCP
Quality Assurance & Compliance
1 119 (33.62%) ISO/IEC 27001
2 65 (18.36%) NIST
3 63 (17.80%) GDPR
4 53 (14.97%) PCI DSS
5 46 (12.99%) COBIT
6 29 (8.19%) Cyber Essentials
7 16 (4.52%) NCSC
7 16 (4.52%) Sarbanes-Oxley
8 10 (2.82%) QA
9 8 (2.26%) NIST 800
10 7 (1.98%) Actionable Recommendations
10 7 (1.98%) COSO
11 5 (1.41%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
12 4 (1.13%) ISO 22301
12 4 (1.13%) PSD2
13 3 (0.85%) Cyber Essentials PLUS
13 3 (0.85%) ISO 31000
13 3 (0.85%) ISO/IEC 27005
14 2 (0.56%) Data Quality
14 2 (0.56%) RMADS
System Software
1 14 (3.95%) Docker
2 1 (0.28%) Active Directory
Systems Management
1 15 (4.24%) Kubernetes
2 6 (1.69%) Opscode Chef
2 6 (1.69%) Puppet
3 4 (1.13%) RSA Archer
3 4 (1.13%) Single Sign-On
4 3 (0.85%) Computer Emergency Response Teams
5 2 (0.56%) EMC NetWorker
Vendors
1 43 (12.15%) Microsoft
2 40 (11.30%) Splunk
3 22 (6.21%) SAP
4 12 (3.39%) ServiceNow
5 9 (2.54%) Oracle
6 6 (1.69%) Alteryx
7 3 (0.85%) BMC
7 3 (0.85%) Remedy
8 2 (0.56%) AlienVault
8 2 (0.56%) CheckPoint
8 2 (0.56%) HP
8 2 (0.56%) Ivanti
8 2 (0.56%) JD Edwards
8 2 (0.56%) Palo Alto
8 2 (0.56%) Qualys
9 1 (0.28%) Adobe
9 1 (0.28%) BT
9 1 (0.28%) Informatica
9 1 (0.28%) Intel
9 1 (0.28%) Tripwire