Hybrid/Remote GRC Job Trends

Governance, Risk Management and Compliance (GRC)
UK > Work from Home

The table below provides summary statistics and salary benchmarking for remote or hybrid work requiring GRC skills. It covers permanent job vacancies from the 6 months leading up to 21 September 2026, with comparisons to the same periods in the previous two years.

6 months to
21 Sep 2026
Same period 2025 Same period 2024
Rank 213 354 379
Rank change year-on-year +141 +25 +34
Permanent jobs citing GRC 296 63 116
As % of all permanent jobs with remote/hybrid work options 1.21% 0.39% 0.50%
As % of the Quality Assurance & Compliance category 7.41% 2.10% 3.65%
Number of salaries quoted 155 42 84
10th Percentile £41,950 £48,750 £37,500
25th Percentile £51,250 £52,500 £50,000
Median annual salary (50th Percentile) £70,000 £70,000 £65,000
Median % change year-on-year - +7.69% -11.86%
75th Percentile £95,000 £88,438 £77,813
90th Percentile £110,000 £106,750 £97,125
UK median annual salary £75,000 £75,000 £66,750
% change year-on-year - +12.36% -4.64%

All Quality Assurance and Compliance Skills
Work from Home

GRC falls under the Quality Assurance and Compliance category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies with remote or hybrid options requiring quality assurance or compliance skills.

Permanent vacancies with a requirement for quality assurance or compliance skills 3,995 2,999 3,182
As % of all permanent jobs with a WFH option 16.36% 18.50% 13.72%
Number of salaries quoted 2,513 1,652 1,905
10th Percentile £33,750 £35,050 £35,231
25th Percentile £44,447 £47,500 £45,000
Median annual salary (50th Percentile) £57,591 £62,500 £60,000
Median % change year-on-year -7.85% +4.17% -
75th Percentile £76,201 £77,500 £78,750
90th Percentile £93,634 £95,000 £103,750
UK median annual salary £57,500 £57,500 £57,000
% change year-on-year - +0.88% -5.00%

GRC
Job Vacancy Trend for Remote/Hybrid Jobs

Historical trend showing the proportion of permanent IT job postings citing GRC and offering remote or hybrid work options relative to all permanent IT jobs advertised.

GRC job vacancy trend for remote/hybrid jobs

GRC
Salary Trend for Remote/Hybrid Jobs

Salary distribution trend for jobs with remote/hybrid work options citing GRC.

Salary distribution trend for jobs with remote/hybrid work options citing GRC

GRC
Salary Histogram for Remote/Hybrid Jobs

Salary distribution for jobs with remote/hybrid work options citing GRC over the 6 months to 21 September 2026.

GRC salary histogram for jobs with remote/hybrid work options

GRC
Co-Occurring Skills & Capabilities in Remote/Hybrid Jobs by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 6 (2.03%) SAS
2 5 (1.69%) Totara
3 1 (0.34%) SharePoint
Applications
1 3 (1.01%) Microsoft Excel
2 2 (0.68%) Microsoft Project
3 1 (0.34%) Microsoft PowerPoint
Business Applications
1 5 (1.69%) SAP GRC
1 5 (1.69%) SAP S/4HANA
2 1 (0.34%) SAP BPC
2 1 (0.34%) SAP HCM
Cloud Services
1 80 (27.03%) Azure
2 64 (21.62%) Cloud Computing
3 41 (13.85%) Microsoft 365
4 36 (12.16%) Power Platform
5 30 (10.14%) AWS
6 26 (8.78%) Serverless
7 19 (6.42%) SaaS
8 7 (2.36%) Entra ID
9 6 (2.03%) Microsoft Purview
10 5 (1.69%) GCP
11 3 (1.01%) OCI
12 2 (0.68%) Azure DevOps
12 2 (0.68%) Azure Key Vault
12 2 (0.68%) Cloudflare
12 2 (0.68%) Google Workspace
12 2 (0.68%) Microsoft Copilot
12 2 (0.68%) Smartsheet
12 2 (0.68%) Vercel
13 1 (0.34%) Copilot Studio
Communications & Networking
1 62 (20.95%) WAN
2 58 (19.59%) LAN
3 17 (5.74%) Network Security
4 16 (5.41%) Firewall
5 5 (1.69%) DMZ
6 4 (1.35%) SD-WAN
7 3 (1.01%) Cisco ASA
Database & Business Intelligence
1 4 (1.35%) Power BI
Development Applications
1 25 (8.45%) Snyk
2 2 (0.68%) JIRA
2 2 (0.68%) Yeoman
General
1 122 (41.22%) Social Skills
2 90 (30.41%) Finance
3 62 (20.95%) Presentation Skills
4 42 (14.19%) Inclusion and Diversity
5 39 (13.18%) Law
6 28 (9.46%) Analytical Skills
7 27 (9.12%) Public Sector
8 15 (5.07%) Legal
8 15 (5.07%) Retail
9 12 (4.05%) Banking
9 12 (4.05%) Financial Institution
10 11 (3.72%) Telecoms
11 9 (3.04%) Organisational Skills
12 8 (2.70%) French Language
12 8 (2.70%) German Language
13 6 (2.03%) Manufacturing
14 4 (1.35%) Advertising
14 4 (1.35%) Aerospace
14 4 (1.35%) Automotive
14 4 (1.35%) Marketing
Job Titles
1 95 (32.09%) Architect
2 58 (19.59%) Systems Architect
3 51 (17.23%) Consultant
4 47 (15.88%) Senior
5 32 (10.81%) Senior Architect
6 30 (10.14%) Security Architect
7 28 (9.46%) Senior Security Architect
8 25 (8.45%) Cloud Architect
8 25 (8.45%) Cloud Security Architect
8 25 (8.45%) Security Consultant
8 25 (8.45%) Senior Cloud Architect
9 21 (7.09%) Analyst
10 16 (5.41%) Security Manager
11 15 (5.07%) Security Specialist
12 12 (4.05%) Lead
13 10 (3.38%) Security Analyst
14 9 (3.04%) IT Manager
14 9 (3.04%) IT Security Manager
14 9 (3.04%) Security Advisor
14 9 (3.04%) Solutions Architect
Libraries, Frameworks & Software Standards
1 9 (3.04%) React
2 7 (2.36%) Node.js
3 5 (1.69%) ModSecurity
3 5 (1.69%) SAP Fiori
4 4 (1.35%) SailPoint
4 4 (1.35%) SAPUI5
5 2 (0.68%) CSS
5 2 (0.68%) HTML
6 1 (0.34%) REST
6 1 (0.34%) SOAP
6 1 (0.34%) TAPI
Miscellaneous
1 34 (11.49%) Management Information System
2 26 (8.78%) Data Centre
3 21 (7.09%) Security Posture
4 19 (6.42%) Onboarding
5 15 (5.07%) Cloud Native
6 10 (3.38%) Self-Motivation
7 8 (2.70%) Cyber Defence
7 8 (2.70%) Operational Technology
8 7 (2.36%) e-Learning
8 7 (2.36%) PKI
9 5 (1.69%) Blog
9 5 (1.69%) Cloud Security Posture
9 5 (1.69%) Cyber Kill Chain
9 5 (1.69%) Learning Management System
9 5 (1.69%) Security Operations Centre
10 4 (1.35%) PMI
11 3 (1.01%) AI Agents
11 3 (1.01%) Distributed Denial-of-Service
11 3 (1.01%) Enterprise Software
11 3 (1.01%) NHS
Operating Systems
1 1 (0.34%) Linux
1 1 (0.34%) Windows
1 1 (0.34%) Windows Server
Processes & Methodologies
1 165 (55.74%) Information Security
2 150 (50.68%) Risk Management
3 141 (47.64%) Cybersecurity
4 86 (29.05%) Roadmaps
5 68 (22.97%) IT Strategy
5 68 (22.97%) Technology Strategy
6 64 (21.62%) AI
6 64 (21.62%) Project Delivery
7 63 (21.28%) Containerisation
8 62 (20.95%) Business Case
9 60 (20.27%) Logistics
10 58 (19.59%) Business Strategy
10 58 (19.59%) Infrastructure as Code
10 58 (19.59%) Network Architecture
10 58 (19.59%) Network Design
10 58 (19.59%) Technical Architecture
11 57 (19.26%) Cloud Security
12 48 (16.22%) Continuous Improvement
13 46 (15.54%) Stakeholder Management
14 41 (13.85%) CI/CD
Programming Languages
1 11 (3.72%) JavaScript
2 8 (2.70%) TypeScript
3 4 (1.35%) ABAP
4 1 (0.34%) Python
4 1 (0.34%) Ruby
Qualifications
1 56 (18.92%) CISSP
2 51 (17.23%) Security Cleared
3 44 (14.86%) CISM
4 34 (11.49%) SC Cleared
5 25 (8.45%) CRISC
6 19 (6.42%) Degree
7 18 (6.08%) CISA
8 17 (5.74%) ISO 27001 Lead Implementer
9 16 (5.41%) DV Cleared
10 13 (4.39%) ISO 27001 Lead Auditor
11 10 (3.38%) CompTIA Security+
12 8 (2.70%) CREST Certified
13 6 (2.03%) Computer Science Degree
13 6 (2.03%) Master's Degree
13 6 (2.03%) PMI Certification
14 5 (1.69%) (ISC)2 CCSP
14 5 (1.69%) CCSP
14 5 (1.69%) Cisco Certification
15 4 (1.35%) CISMP
15 4 (1.35%) OSCP
Quality Assurance & Compliance
1 123 (41.55%) ISO/IEC 27001
2 70 (23.65%) NIST
3 49 (16.55%) GDPR
4 33 (11.15%) PCI DSS
5 29 (9.80%) Cyber Essentials
6 15 (5.07%) SOC 2
7 14 (4.73%) NCSC
8 12 (4.05%) ISO/IEC 42001
9 10 (3.38%) JSP 440
10 7 (2.36%) QA
11 6 (2.03%) Cyber Essentials PLUS
11 6 (2.03%) ISO/IEC 27005
11 6 (2.03%) NIST 800
12 5 (1.69%) Sarbanes-Oxley
13 4 (1.35%) Accessibility
13 4 (1.35%) COBIT
14 2 (0.68%) HMG Security Policy Framework
15 1 (0.34%) Actionable Recommendations
15 1 (0.34%) IFRS
15 1 (0.34%) SOC 1
System Software
1 25 (8.45%) Virtual Machines
2 5 (1.69%) IAG
Systems Management
1 4 (1.35%) CASB
2 2 (0.68%) Microsoft Intune
3 1 (0.34%) Single Sign-On
Vendors
1 81 (27.36%) Microsoft
2 30 (10.14%) CrowdStrike
3 28 (9.46%) Palo Alto
4 26 (8.78%) Tenable
5 5 (1.69%) SAP
5 5 (1.69%) ServiceNow
6 4 (1.35%) Cisco
6 4 (1.35%) Netskope
6 4 (1.35%) Zscaler
7 3 (1.01%) CheckPoint
7 3 (1.01%) Oracle
8 2 (0.68%) Google
8 2 (0.68%) OneTrust
8 2 (0.68%) Qualys
9 1 (0.34%) Arqiva
9 1 (0.34%) Fortinet
9 1 (0.34%) Sage