LogoFresh Jobs Ahead
Sprinto
Sprinto
51 – 200 Employees
Sprinto’s company profile offers a starting point for job seekers researching the organization. The available source does not confirm Sprinto’s sector, products, team structure, or current hiring focus, so this overview avoids adding unsupported details.
LinkedIn
Company Jobs

Senior GRC Consultant (Contract) – India Remote

Sprinto is seeking a senior GRC consultant to deliver ISO 27001, SOC 2, GDPR, and related compliance programs for clients. The role includes client delivery, engagement economics, quality oversight, and AI-assisted playbook development.

INIndiaRemoteContractSeniorEnglish RequiredCompliance

Description

  • Lead standard-framework engagements covering ISO 27001 implementation and surveillance, SOC 2 Type I/II readiness, GDPR and PCI DSS programs, gap assessments, control mapping, internal audits, policy reviews, and audit-readiness support.
  • Manage multiple client engagements independently while maintaining consistent delivery quality.
  • Develop and improve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks.
  • Update framework materials as applicable standards and guidance change.
  • Expand the framework library to include areas such as HIPAA, PCI DSS, and ISO 42001 as demand develops.
  • Set pricing and service packages for standard-framework engagements.
  • Manage utilization, margins, and delivery forecasts across the engagement portfolio.
  • Work with Sales, SE, and CS on service attachment, renewals, and technical deal validation.
  • Create AI-assisted playbooks for gap assessments, control mapping, and internal audit checklists.
  • Design structured forms and checklists that help junior staff and AI-assisted workflows produce consistent first drafts.
  • Implement QA controls covering required source inputs, validation procedures, and human approval gates.
  • Define deliverable acceptance criteria and review milestones.
  • Identify scope expansion early and escalate unclear liability issues.
  • Act as the internal advisor on ISO 27001, SOC 2, GDPR, and PCI DSS maturity questions for Sales, SE, and CS.
  • Track performance against utilization, gross margin, QA pass rate, rework, delivery speed, CSAT, service attachment, and playbook reuse metrics.

Requirements

  • At least five years of experience in GRC or security consulting, or ownership of an in-house compliance program.
  • Hands-on experience delivering ISO 27001, SOC 2, and GDPR programs at minimum.
  • Ability to manage several client engagements concurrently.
  • Strong knowledge of ISO 27001 and SOC 2 Type I/II.
  • Strong knowledge of GDPR.
  • Working knowledge of PCI DSS, HIPAA, ISO 42001, or similar frameworks is preferred.
  • Experience using AI tools to reduce manual work and standardize deliverables.
  • Ability to turn compliance expertise into reusable templates and guided systems.
  • Experience managing engagement pricing, packaging, margins, and utilization.
  • Strong written communication skills.
  • Confidence leading client workshops independently.
  • Sound judgment in ambiguous situations and the ability to control scope expansion.
  • ISO 27001 LA/LI, CISA, or CISM certification is preferred.
  • Availability to start immediately.

Benefits

  • Remote work arrangement.
  • Inclusive and accessible hiring process.
  • Opportunity to work with AI-driven automation and productization.
  • Opportunity to develop reusable intellectual property and guided systems.
  • Six-month contract engagement.

Related Jobs