Senior GRC Consultant - Contract
Free to start · No card · 5 credits the moment you sign up
Job description
Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.
Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.
Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised$31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.
Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.
Life as a Sprinter -
Nobody succeeds at Sprinto by staying in their lane.
We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.
Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction.
We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.
And while we move with urgency, we never move alone.
The mission -
Owns day-to-day GRC program maturity and delivery for Sprinto's standard-framework services — the highest-volume, highest-repeatability engine of Trust Assurance. Keeps the standard-framework playbook current, delivers consistently, and is the internal go-to for ISO 27001 / SOC 2 / GDPR / PCI DSS etc. maturity questions across Sales, SE, and CS
Where you'll leave your mark?
Own delivery for standard-framework engagements: ISO 27001 (implementation & surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, audit readiness support.
Run multiple concurrent client engagements to a consistent quality bar without close supervision.
Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks; keep them current as frameworks revise (ISO 27001:2022 transition-type updates, SOC 2 trust criteria changes, GDPR enforcement guidance).
Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows.
Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options).
Own utilization, margin, and delivery forecasting for your own engagement book.
Partner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed.
Build and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists).
Define structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output.
Set QA guardrails: mandatory source inputs, validation steps, human approval gates.
Establish acceptance criteria and review checkpoints for deliverables.
Flag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.
Deliver
Build reusable IP
Own commercial outcomes
AI-enabled productization
Quality & risk
The kind of builder we're looking for -
5+ years in GRC/security consulting or in-house compliance program ownership.
Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum.
Comfortable running several concurrent client engagements.
Deep: ISO 27001, SOC 2 Type I/II, GDPR.
Working knowledge (nice to have): PCI DSS, HIPAA, ISO 42001 etc
Demonstrated use of AI tools to reduce manual effort and standardize deliverables.
Able to translate domain expertise into reusable templates and guided systems.
Can own pricing/packaging, margin, and utilization for their own book without a manager doing it for them.
Strong written communication; confident running client workshops solo.
Good judgment in ambiguity, without scope creep.
ISO 27001 LA/LI, CISA, or CISM.
- This a contract role for six months & we are looking for candidates who can join us immediately
Utilization % and gross margin on standard-framework engagements.
QA pass rate, rework rate, deliverable cycle time (benchmarked against standard-framework norms — weeks, not months).
Customer satisfaction (CSAT) on delivered engagements.
Attach rate for standard-framework services; playbook reuse rate.
Experience
Domain mastery
AI-enabled workflow proficiency
Operator strengths
Preferred
Success metrics
Inclusion & Diversity -
At Sprinto, talent, curiosity, and ownership matter more than where you come from. We hire people for the problems they can solve, the impact they create, and the way they help others succeed—not their background, identity, or personal circumstances. We believe the best teams are built when people with different perspectives come together around a shared ambition to build something meaningful.
We're proud to be an equal opportunity employer and are committed to creating a fair, inclusive, and accessible hiring process for everyone.
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for Sprinto. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.