The median Information Security Risk & GRC Consultant salary in Singapore is SGD9K/mo in 2026, with a typical range from SGD8K/mo to SGD10K/mo. Pay has moved +7.7% year-on-year. This is base salary for permanent employees. Contracting instead? See day rates for this role below.
What does An Information Security Risk & GRC Consultant do?
An Information Security Risk & GRC Consultant is responsible for advising organisations on information security risk, governance frameworks, and regulatory compliance, often across multiple client engagements.
Day-to-day responsibilities
- Running risk assessments against MAS TRM or ISO 27001
- Drafting policy and control documentation
- Supporting audit engagements
- Advising clients on remediation roadmaps
High demand+14% Risk frameworks (ISO 27001, MAS TRM)+12% Audit & compliance advisory+11% Security policy & control design