Outside IR35 GRC Contract Jobs
Updating results…
16 Contract jobs sorted by:
Date Posted
Date Posted
Rate
Updating results…
16 Contract jobs
Stay Updated on Contract Jobs
Never miss another opportunity with our email alerts.
Save your searches to be notified as soon as new jobs are added.
 Next Ventures.png)
Create a free account to access remote working contract opportunities outside the UK
Sign Up Hays.png)
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Create a free account to access remote working contract opportunities outside the UK
Sign Up
GRC / Cyber Security Risk Analyst
Posted 2 weeks ago by Hays
The RoleYou will work across technology, security and business teams to identify, assess and manage cyber security risks...
- Rate £450 per day
- Category Outside
- Work type Hybrid
- Location North West; Manchester; Liverpool; Bolton; Warrington; Preston; Chester; Blackpool; Oldham; Wigan; Carlisle
Create a free account to access remote working contract opportunities outside the UK
Sign UpSort By
Saved Searches
No saved searches yet
Filters
IR35 Status
Working Arrangements
Industry
Sector
Country
Seniority Level
Posted By
Contract Rate
Date Posted
IR35 Status
Working Arrangements
Industry
Sector
Posted By
Country
Seniority Level
Date Posted
Contract Rate
£
—
£
About Our Outside IR35 GRC Contract Roles
What does a grc contractor do?
Organisations bring in GRC contractors to help organisations establish, operate, and improve the integrated frameworks through which they manage their governance obligations, enterprise risks, and compliance requirements. The work spans a broad range of activities depending on the engagement: developing and implementing risk management frameworks aligned to standards such as ISO 31000, designing and operating compliance monitoring and testing programmes, building and maintaining policy frameworks, supporting internal audit and assurance processes, implementing GRC technology platforms, and helping organisations prepare for regulatory examinations. GRC contractors work across financial services, healthcare, technology, energy, and other regulated industries where the intersection of governance, risk, and compliance creates complex management challenges.
The skills expected of GRC contractors combine deep knowledge of the relevant regulatory and risk frameworks with the practical ability to implement and operate GRC processes in complex organisational environments. In financial services, familiarity with the FCA and PRA's supervisory frameworks, SMCR, operational resilience requirements, and the relevant prudential standards is expected alongside general risk management methodology. For ISO 27001 or SOC 2 focused roles, experience designing and implementing information security management systems is the primary technical requirement. Proficiency with GRC technology platforms such as RSA Archer, MetricStream, ServiceNow GRC, or MEGA HOPEX is increasingly expected for implementation-focused roles. The ability to engage senior stakeholders on risk and compliance matters, produce clear and board-ready risk reporting, and drive the cultural embedding of risk awareness is consistently valued alongside technical GRC knowledge.
What is the market like for grc contractors?
The GRC contract market is a reliably busy and specialist market, particularly within financial services, where the volume and pace of regulatory change creates sustained demand for professionals who can integrate governance, risk, and compliance management into a coherent and efficient framework. The increasing regulatory focus on operational resilience, climate risk, and third-party risk management has expanded the GRC agenda across UK financial institutions and created new contract demand in these areas. Healthcare, technology, and energy sectors also generate consistent GRC contract demand driven by sector-specific regulatory obligations. Rates for experienced GRC contractors with relevant regulatory and sector expertise are at the premium end of the risk and compliance contracting market.
What does Outside IR35 mean?
IR35 is UK tax legislation that determines whether a contractor is genuinely self-employed or working in a manner that resembles employment. When a contract is classified as outside IR35, the engagement is treated as a business-to-business arrangement. The contractor operates through their own limited company, invoices for services, and manages their own tax affairs including corporation tax, self-assessment, and VAT where applicable.
Outside IR35 engagements are assessed against three key factors: the degree of control the client exercises over how the work is delivered, whether the contractor has a genuine right to provide a substitute, and whether there is a mutuality of obligation between the parties. Contracts that demonstrate contractor autonomy, project-based delivery, and the absence of ongoing employment obligations are more likely to sit outside IR35. Since April 2021, responsibility for making this determination sits with the end client for medium and large private sector organisations.
On QualityContracts.co.uk, approximately 28% of roles with a stated IR35 status are classified as outside IR35. The proportion varies by sector and role type, with some disciplines seeing a significantly higher or lower share of outside IR35 opportunities. Each listing on this page displays its IR35 status where provided by the hiring organisation.
What grc roles are usually Outside IR35?
Around 25% of GRC contracts with a stated IR35 status sit outside. The outside IR35 opportunities tend to involve specific compliance framework implementations: deploying a GRC platform, conducting a risk assessment programme, or producing a regulatory gap analysis with a defined report. Consultancies specialising in governance, risk, and compliance and organisations responding to regulatory findings are the most active hirers for project-based GRC work.
How much do grc contractors usually earn when working Outside IR35?
Contract rates for grc roles typically range from £500 to £850 per day, depending on the scope of the role, required expertise, and the delivery expectations of the engagement. Rates shown are for outside IR35 engagements and reflect the gross day rate paid to the contractor's limited company before any personal tax obligations.
How many Outside IR35 grc vacancies are there on Quality Contracts?
Over the past twelve months, we have tracked over 150 grc contract roles across the site. Of the roles currently listed on our site, around one in four are Outside IR35. Data reviewed up to July 2026.