Governance, Risk Management and Compliance (GRC)
UK

The table below provides summary statistics and salary benchmarking for jobs requiring GRC skills. It covers permanent job vacancies from the 6 months leading up to 9 October 2026, with comparisons to the same periods in the previous two years.

6 months to
9 Oct 2026
Same period 2025 Same period 2024
Rank 323 481 529
Rank change year-on-year +158 +48 -66
Permanent jobs citing GRC 665 203 250
As % of all permanent jobs in the UK 0.56% 0.41% 0.34%
As % of the Quality Assurance & Compliance category 5.39% 2.62% 2.44%
Number of salaries quoted 381 132 138
10th Percentile £45,000 £48,750 £49,250
25th Percentile £55,000 £53,750 £61,250
Median annual salary (50th Percentile) £75,000 £75,000 £71,910
Median % change year-on-year - +4.30% +2.73%
75th Percentile £95,000 £87,500 £87,500
90th Percentile £110,000 £107,500 £100,000
UK excluding London median annual salary £60,000 £62,875 £62,750
% change year-on-year -4.57% +0.20% -5.64%

All Quality Assurance and Compliance Skills
UK

GRC falls under the Quality Assurance and Compliance category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring quality assurance or compliance skills.

Permanent vacancies with a requirement for quality assurance or compliance skills 12,337 7,752 10,232
As % of all permanent jobs advertised in the UK 10.46% 15.58% 14.10%
Number of salaries quoted 7,627 4,220 4,809
10th Percentile £31,000 £30,000 £30,000
25th Percentile £41,250 £40,000 £41,250
Median annual salary (50th Percentile) £55,000 £57,500 £57,500
Median % change year-on-year -4.35% - -4.17%
75th Percentile £75,000 £76,250 £77,500
90th Percentile £95,000 £93,750 £97,500
UK excluding London median annual salary £50,000 £50,000 £50,000
% change year-on-year - - -4.76%

GRC
Job Vacancy Trend

Historical trend showing the proportion of permanent IT job postings citing GRC relative to all permanent IT jobs advertised.

GRC job vacancy trend in the UK

GRC
Salary Trend

Salary distribution trend for jobs in the UK citing GRC.

Salary distribution trend for jobs in the UK citing GRC

GRC
Salary Histogram

Salary distribution for jobs citing GRC over the 6 months to 9 October 2026.

Salary histogram for GRC in the UK

GRC
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing GRC within the UK over the 6 months to 9 October 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +110 539 £75,000 - 592
UK excluding London +103 387 £60,000 -4.57% 246
Work from Home +149 292 £70,000 - 263
London +61 231 £85,000 -2.86% 356
Midlands +18 76 £58,589 -8.10% 29
South East -12 66 £72,500 +3.57% 59
Northern Ireland - 59 - - 15
North of England -39 56 £55,000 -13.04% 80
South West -43 56 £57,500 +2.22% 24
West Midlands -11 40 £55,000 -7.49% 20
North West +9 39 £50,000 -9.09% 42
East of England -7 38 £38,300 -30.36% 15
East Midlands -1 36 £60,000 -17.24% 9
Wales -53 25 £92,500 +76.19% 7
Yorkshire -30 17 £81,000 +15.10% 36
Scotland +18 11 £132,500 +91.34% 16

GRC
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 6 (0.90%) SAS
2 4 (0.60%) Palantir Foundry
3 2 (0.30%) Confluence
3 2 (0.30%) Totara
4 1 (0.15%) IIS
4 1 (0.15%) SharePoint
Applications
1 5 (0.75%) Microsoft Office
2 3 (0.45%) Microsoft Project
3 1 (0.15%) Microsoft Excel
3 1 (0.15%) Microsoft PowerPoint
3 1 (0.15%) MS Visio
3 1 (0.15%) Spreadsheet
Business Applications
1 14 (2.11%) SAP S/4HANA
2 10 (1.50%) SAP GRC
3 2 (0.30%) SAP MDG
4 1 (0.15%) Integrated Workplace Management System
4 1 (0.15%) Primavera
4 1 (0.15%) Salesforce CRM
4 1 (0.15%) SAP BPC
4 1 (0.15%) SAP HCM
Cloud Services
1 136 (20.45%) Azure
2 80 (12.03%) AWS
3 70 (10.53%) Cloud Computing
4 61 (9.17%) Microsoft 365
5 45 (6.77%) Power Platform
6 36 (5.41%) SaaS
7 22 (3.31%) GCP
8 20 (3.01%) Serverless
9 19 (2.86%) Microsoft Purview
10 18 (2.71%) Entra ID
11 8 (1.20%) GitHub
11 8 (1.20%) GitHub Actions
12 7 (1.05%) Snowflake
13 6 (0.90%) Alation
13 6 (0.90%) Collibra
13 6 (0.90%) OCI
14 5 (0.75%) Azure Sentinel
15 4 (0.60%) Microsoft Copilot
16 3 (0.45%) AWS Direct Connect
16 3 (0.45%) Azure ExpressRoute
Communications & Networking
1 69 (10.38%) WAN
2 65 (9.77%) LAN
3 39 (5.86%) Network Security
4 26 (3.91%) Firewall
5 7 (1.05%) SD-WAN
6 6 (0.90%) DMZ
6 6 (0.90%) TCP/IP
7 4 (0.60%) Cisco ASA
8 3 (0.45%) Cisco ISE
8 3 (0.45%) Cisco Nexus
8 3 (0.45%) DNS
8 3 (0.45%) Intrusion Detection
8 3 (0.45%) Wireless
9 2 (0.30%) DHCP
9 2 (0.30%) VPN
10 1 (0.15%) Converged Networks
10 1 (0.15%) HTTP
10 1 (0.15%) HTTPS
10 1 (0.15%) SMTP
Database & Business Intelligence
1 13 (1.95%) Power BI
2 6 (0.90%) Metadata
3 1 (0.15%) Data Lake
Development Applications
1 18 (2.71%) Snyk
2 8 (1.20%) TeamCity
3 6 (0.90%) Yeoman
4 3 (0.45%) JIRA
5 1 (0.15%) GitLab
5 1 (0.15%) Jenkins
General
1 243 (36.54%) Social Skills
2 176 (26.47%) Finance
3 70 (10.53%) Presentation Skills
4 69 (10.38%) Analytical Skills
5 68 (10.23%) Public Sector
6 54 (8.12%) Legal
7 53 (7.97%) Inclusion and Diversity
8 45 (6.77%) Law
9 44 (6.62%) Retail
10 41 (6.17%) Banking
11 37 (5.56%) Influencing Skills
12 23 (3.46%) Manufacturing
13 19 (2.86%) Organisational Skills
14 14 (2.11%) Financial Institution
15 10 (1.50%) Marketing
16 9 (1.35%) Aerospace
16 9 (1.35%) Telecoms
17 8 (1.20%) French Language
17 8 (1.20%) German Language
18 7 (1.05%) Aviation
Job Titles
1 131 (19.70%) Architect
2 109 (16.39%) Consultant
3 80 (12.03%) Senior
4 72 (10.83%) Analyst
5 65 (9.77%) Security Manager
6 62 (9.32%) Systems Architect
7 51 (7.67%) Lead
8 46 (6.92%) Security Architect
9 41 (6.17%) Security Consultant
10 35 (5.26%) Senior Architect
11 33 (4.96%) Security Analyst
12 31 (4.66%) Senior Security Architect
13 23 (3.46%) Cybersecurity Manager
13 23 (3.46%) Security Specialist
14 19 (2.86%) Governance Analyst
14 19 (2.86%) Governance Manager
15 18 (2.71%) Cloud Architect
15 18 (2.71%) Cloud Security Architect
15 18 (2.71%) Senior Cloud Architect
16 17 (2.56%) Cybersecurity Consultant
Libraries, Frameworks & Software Standards
1 9 (1.35%) SAP Fiori
1 9 (1.35%) Terraform
2 8 (1.20%) eBPF
2 8 (1.20%) React
3 7 (1.05%) Node.js
4 6 (0.90%) SailPoint
5 5 (0.75%) ModSecurity
5 5 (0.75%) OpenID
5 5 (0.75%) SAML
5 5 (0.75%) SAPUI5
6 3 (0.45%) REST
6 3 (0.45%) SOAP
7 1 (0.15%) .NET
7 1 (0.15%) HTML
7 1 (0.15%) TAPI
7 1 (0.15%) XML
Miscellaneous
1 66 (9.92%) Security Posture
2 59 (8.87%) Management Information System
3 28 (4.21%) Data Centre
4 27 (4.06%) Cloud Native
5 23 (3.46%) PKI
6 22 (3.31%) Operational Technology
7 21 (3.16%) Onboarding
8 16 (2.41%) Cyber Threat
9 12 (1.80%) Cyber Defence
10 10 (1.50%) Cyber Kill Chain
10 10 (1.50%) Self-Motivation
11 9 (1.35%) AI Agents
11 9 (1.35%) Security Operations Centre
12 8 (1.20%) Cloud Security Posture
13 7 (1.05%) Blog
13 7 (1.05%) Enterprise Software
14 6 (0.90%) Distributed Denial-of-Service
14 6 (0.90%) Product Ownership
15 5 (0.75%) Cyber Security Posture
15 5 (0.75%) Team-Oriented Environment
Operating Systems
1 5 (0.75%) Windows
2 4 (0.60%) Windows Server
3 3 (0.45%) Linux
4 2 (0.30%) Windows Server 2016
4 2 (0.30%) Windows Server 2019
Processes & Methodologies
1 352 (52.93%) Cybersecurity
2 335 (50.38%) Risk Management
3 293 (44.06%) Information Security
4 141 (21.20%) Stakeholder Management
5 133 (20.00%) Roadmaps
6 125 (18.80%) Continuous Improvement
7 117 (17.59%) AI
8 96 (14.44%) Cloud Security
8 96 (14.44%) Incident Response
9 77 (11.58%) Security Architecture
9 77 (11.58%) Technology Strategy
10 76 (11.43%) Security Operations
11 74 (11.13%) IT Strategy
12 73 (10.98%) Decision-Making
12 73 (10.98%) Stakeholder Engagement
13 72 (10.83%) Business Strategy
13 72 (10.83%) Containerisation
13 72 (10.83%) Vulnerability Management
14 71 (10.68%) Infrastructure as Code
14 71 (10.68%) Project Delivery
Programming Languages
1 10 (1.50%) JavaScript
2 9 (1.35%) Python
2 9 (1.35%) TypeScript
3 8 (1.20%) Go
4 5 (0.75%) ABAP
5 4 (0.60%) Java
6 3 (0.45%) C
7 2 (0.30%) Kusto Query Language
7 2 (0.30%) PowerShell
8 1 (0.15%) C#
8 1 (0.15%) Ruby
Qualifications
1 140 (21.05%) CISSP
2 113 (16.99%) CISM
3 96 (14.44%) Security Cleared
4 65 (9.77%) CRISC
5 56 (8.42%) Degree
6 47 (7.07%) DV Cleared
7 46 (6.92%) SC Cleared
8 44 (6.62%) CISA
9 37 (5.56%) ISO 27001 Lead Auditor
10 31 (4.66%) ISO 27001 Lead Implementer
11 26 (3.91%) Cisco Certification
12 20 (3.01%) (ISC)2 CCSP
13 19 (2.86%) CompTIA Security+
14 14 (2.11%) CCSP
15 13 (1.95%) Master's Degree
16 12 (1.80%) AWS Certification
17 11 (1.65%) Computer Science Degree
17 11 (1.65%) CREST Certified
17 11 (1.65%) DBS Check
18 10 (1.50%) CISMP
Quality Assurance & Compliance
1 268 (40.30%) ISO/IEC 27001
2 190 (28.57%) NIST
3 125 (18.80%) GDPR
4 65 (9.77%) Cyber Essentials
5 52 (7.82%) PCI DSS
6 40 (6.02%) NCSC
7 36 (5.41%) SOC 2
8 24 (3.61%) ISO/IEC 27005
8 24 (3.61%) NIST 800
9 18 (2.71%) ISO/IEC 42001
10 17 (2.56%) Data Quality
11 16 (2.41%) Cyber Essentials PLUS
11 16 (2.41%) JSP 440
12 15 (2.26%) QA
12 15 (2.26%) Sarbanes-Oxley
13 9 (1.35%) COBIT
13 9 (1.35%) ISO 31000
14 7 (1.05%) ISO 9001
15 6 (0.90%) Accessibility
15 6 (0.90%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
System Software
1 18 (2.71%) Virtual Machines
2 5 (0.75%) IAG
3 3 (0.45%) Active Directory
3 3 (0.45%) VMware ESXi
3 3 (0.45%) VMware Infrastructure
Systems Management
1 9 (1.35%) Kubernetes
2 8 (1.20%) Cilium
3 5 (0.75%) CASB
4 4 (0.60%) Microsoft Intune
4 4 (0.60%) Single Sign-On
5 1 (0.15%) Nessus
5 1 (0.15%) QRadar
5 1 (0.15%) RSA Archer
Vendors
1 111 (16.69%) Microsoft
2 27 (4.06%) CrowdStrike
3 22 (3.31%) Palo Alto
4 21 (3.16%) Tenable
5 16 (2.41%) ServiceNow
6 15 (2.26%) SAP
7 9 (1.35%) Cisco
8 8 (1.20%) OneTrust
9 7 (1.05%) Zscaler
10 6 (0.90%) Informatica
10 6 (0.90%) Oracle
11 5 (0.75%) Qualys
11 5 (0.75%) Workday
12 4 (0.60%) Foundry
12 4 (0.60%) Google
12 4 (0.60%) Netskope
12 4 (0.60%) Palantir
13 3 (0.45%) CheckPoint
13 3 (0.45%) Juniper
13 3 (0.45%) VMware