Consultant

We are a sales and marketing agency that create tailor made strategies to help grow your business and maximize its sales. The unique blend of our expertise and experience across the world of marketing, digital and technology enables us to create great products and solutions which can transform your business. IDENTIFYING NEW BUSINESS OPPORTUNITIES AND TO DRIVE MORE REVENUE IS AT THE HEART OF OUR SOLUTIONS.

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.
Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.
Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 3,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.
Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.
<h3>Life as a Sprinter :&nbsp;</h3>
Nobody succeeds at Sprinto by staying in their lane.
We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.
Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction.
We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.
And while we move with urgency, we never move alone.
<h3>The mission of this role :&nbsp;</h3>
Owns day-to-day GRC program maturity and delivery for Sprinto's standard-framework services — the highest-volume, highest-repeatability engine of Trust Assurance. Keeps the standard-framework playbook current, delivers consistently, and is the internal go-to for ISO 27001 / SOC 2 / GDPR / PCI DSS etc. maturity questions across Sales, SE, and CS\n Where you'll Leave Your Mark / Things You'll Build<div>
Deliver
<ul>
<li>
Own delivery for standard-framework engagements: ISO 27001 (implementation &amp; surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, audit readiness support.
</li>
<li>
Run multiple concurrent client engagements to a consistent quality bar without close supervision.
</li>
</ul>
Build reusable IP
<ul>
<li>
Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks; keep them current as frameworks revise (ISO 27001:2022 transition-type updates, SOC 2 trust criteria changes, GDPR enforcement guidance).
</li>
<li>
Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows.
</li>
</ul>
Own commercial outcomes
<ul>
<li>
Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options).
</li>
<li>
Own utilization, margin, and delivery forecasting for your own engagement book.
</li>
<li>
Partner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed.
</li>
</ul>
AI-enabled productization
<ul>
<li>
Build and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists).
</li>
<li>
Define structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output.
</li>
<li>
Set QA guardrails: mandatory source inputs, validation steps, human approval gates.
</li>
</ul>
Quality &amp; risk
<ul>
<li>
Establish acceptance criteria and review checkpoints for deliverables.
</li>
<li>
Flag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.
</li>
</ul>
</div> The kind of builder we're looking For<div>
Experience
<ul>
<li>
5+ years in GRC/security consulting or in-house compliance program ownership.
</li>
<li>
Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum.
</li>
<li>
Comfortable running several concurrent client engagements.
</li>
</ul>
Domain mastery
<ul>
<li>
Deep: ISO 27001, SOC 2 Type I/II, GDPR.
</li>
<li>
Working knowledge (nice to have): PCI DSS, HIPAA, ISO 42001 etc
</li>
</ul>
AI-enabled workflow proficiency
<ul>
<li>
Demonstrated use of AI tools to reduce manual effort and standardize deliverables.
</li>
<li>
Able to translate domain expertise into reusable templates and guided systems.
</li>
</ul>
Operator strengths
<ul>
<li>
Can own pricing/packaging, margin, and utilization for their own book without a manager doing it for them.
</li>
<li>
Strong written communication; confident running client workshops solo.
</li>
<li>
Good judgment in ambiguity, without scope creep.
</li>
</ul>
Preferred
<ul>
<li>
ISO 27001 LA/LI, CISA, or CISM.
</li>
</ul>
<h3>Success metrics</h3>
<ul>
<li>
Utilization % and gross margin on standard-framework engagements.
</li>
<li>
QA pass rate, rework rate, deliverable cycle time (benchmarked against standard-framework norms — weeks, not months).
</li>
<li>
Customer satisfaction (CSAT) on delivered engagements.
</li>
<li>
Attach rate for standard-framework services; playbook reuse rate.
</li>
</ul>
</div> You will enjoy Sprinto if<div>
<ul>
<li>
Stepping in before someone has to step up.
</li>
<li>
Wearing multiple hats without counting them.
</li>
<li>
Leaving egos at the door and winning as one team.
</li>
<li>
Taking the harder right over the easier wrong.
</li>
<li>
Shipping, learning, repeating.
</li>
<li>
Staying curious and never staying in your lane.
</li>
</div> How we care for our Sprinters<div>
<ul>
<li>
Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.
</li>
<li>
Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.
</li>
<li>
We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.
</li>
<li>
We count your spark, not your leaves: Unlimited leave so you can reset when you need to.
</li>
<li>
Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.
</li>
<li>
Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you
</li>
</div> \n
<h3>Inclusion &amp; Diversity -</h3>
<div data-qa="posting-requirements">



Sprinto is an equal opportunity employer and does not discriminate on the basis of race, colour, religion, gender, sexual orientation, age, disability, or any other protected status. You are welcome at Sprinto for who you are, and we encourage you to bring your complete selves to work. Our culture is built on the strength of diverse thinking — when people with different perspectives, ideas, and ways of solving problems come together, it fuels collaboration and accelerates our mission.
&nbsp;
At Sprinto, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. Please share your request for reasonable accommodations at any stage of the application or interview process; we want to ensure everyone feels heard and seen.




</div>

The Senior GRC Consultant at Sprinto will own day-to-day GRC program maturity and delivery for standard-framework services, ensuring consistent quality across multiple client engagements.

Senior GRC Consultant - Standard Frameworks

India

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.
Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.
Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 3,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.
Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.
<h3>Life as a Sprinter :&nbsp;</h3>
Nobody succeeds at Sprinto by staying in their lane.
We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.
Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction.
We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.
And while we move with urgency, we never move alone.
<h3>The mission of this role :&nbsp;</h3>
Owns day-to-day GRC program maturity and delivery for Sprinto's standard-framework services — the highest-volume, highest-repeatability engine of Trust Assurance. Keeps the standard-framework playbook current, delivers consistently, and is the internal go-to for ISO 27001 / SOC 2 / GDPR / PCI DSS etc. maturity questions across Sales, SE, and CS\n Where you'll Leave Your Mark / Things You'll Build<div>
Deliver
<ul>
<li>
Own delivery for standard-framework engagements: ISO 27001 (implementation &amp; surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, audit readiness support.
</li>
<li>
Run multiple concurrent client engagements to a consistent quality bar without close supervision.
</li>
</ul>
Build reusable IP
<ul>
<li>
Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks; keep them current as frameworks revise (ISO 27001:2022 transition-type updates, SOC 2 trust criteria changes, GDPR enforcement guidance).
</li>
<li>
Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows.
</li>
</ul>
Own commercial outcomes
<ul>
<li>
Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options).
</li>
<li>
Own utilization, margin, and delivery forecasting for your own engagement book.
</li>
<li>
Partner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed.
</li>
</ul>
AI-enabled productization
<ul>
<li>
Build and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists).
</li>
<li>
Define structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output.
</li>
<li>
Set QA guardrails: mandatory source inputs, validation steps, human approval gates.
</li>
</ul>
Quality &amp; risk
<ul>
<li>
Establish acceptance criteria and review checkpoints for deliverables.
</li>
<li>
Flag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.
</li>
</ul>
</div> The kind of builder we're looking For<div>
Experience
<ul>
<li>
5+ years in GRC/security consulting or in-house compliance program ownership.
</li>
<li>
Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum.
</li>
<li>
Comfortable running several concurrent client engagements.
</li>
</ul>
Domain mastery
<ul>
<li>
Deep: ISO 27001, SOC 2 Type I/II, GDPR.
</li>
<li>
Working knowledge (nice to have): PCI DSS, HIPAA, ISO 42001 etc
</li>
</ul>
AI-enabled workflow proficiency
<ul>
<li>
Demonstrated use of AI tools to reduce manual effort and standardize deliverables.
</li>
<li>
Able to translate domain expertise into reusable templates and guided systems.
</li>
</ul>
Operator strengths
<ul>
<li>
Can own pricing/packaging, margin, and utilization for their own book without a manager doing it for them.
</li>
<li>
Strong written communication; confident running client workshops solo.
</li>
<li>
Good judgment in ambiguity, without scope creep.
</li>
</ul>
Preferred
<ul>
<li>
ISO 27001 LA/LI, CISA, or CISM.
</li>
</ul>
<h3>Success metrics</h3>
<ul>
<li>
Utilization % and gross margin on standard-framework engagements.
</li>
<li>
QA pass rate, rework rate, deliverable cycle time (benchmarked against standard-framework norms — weeks, not months).
</li>
<li>
Customer satisfaction (CSAT) on delivered engagements.
</li>
<li>
Attach rate for standard-framework services; playbook reuse rate.
</li>
</ul>
</div> You will enjoy Sprinto if<div>
<ul>
<li>
Stepping in before someone has to step up.
</li>
<li>
Wearing multiple hats without counting them.
</li>
<li>
Leaving egos at the door and winning as one team.
</li>
<li>
Taking the harder right over the easier wrong.
</li>
<li>
Shipping, learning, repeating.
</li>
<li>
Staying curious and never staying in your lane.
</li>
</div> How we care for our Sprinters<div>
<ul>
<li>
Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.
</li>
<li>
Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.
</li>
<li>
We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.
</li>
<li>
We count your spark, not your leaves: Unlimited leave so you can reset when you need to.
</li>
<li>
Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.
</li>
<li>
Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you
</li>
</div> \n
<h3>Inclusion &amp; Diversity -</h3>
<div data-qa="posting-requirements">



Sprinto is an equal opportunity employer and does not discriminate on the basis of race, colour, religion, gender, sexual orientation, age, disability, or any other protected status. You are welcome at Sprinto for who you are, and we encourage you to bring your complete selves to work. Our culture is built on the strength of diverse thinking — when people with different perspectives, ideas, and ways of solving problems come together, it fuels collaboration and accelerates our mission.
&nbsp;
At Sprinto, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. Please share your request for reasonable accommodations at any stage of the application or interview process; we want to ensure everyone feels heard and seen.




</div>Requirements:<ul><li> 5+ years in GRC/security consulting or in-house compliance program ownership.</li><li> Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum.</li><li> Comfortable running several concurrent client engagements.</li><li> Deep knowledge of ISO 27001, SOC 2 Type I/II, GDPR.</li><li> Working knowledge of PCI DSS, HIPAA, ISO 42001 is a plus.</li><li> Demonstrated use of AI tools to reduce manual effort and standardize deliverables.</li><li> Able to translate domain expertise into reusable templates and guided systems.</li><li> Strong written communication; confident running client workshops solo.</li><li> Good judgment in ambiguity, without scope creep.</li><li> ISO 27001 LA/LI, CISA, or CISM preferred.</li></ul>Benefits:<ul><li> 100% remote work flexibility.</li><li> Generous annual allowance for co-working.</li><li> USD 1,000 annually for skill development.</li><li> Unlimited leave policy.</li><li> Health insurance with coverage up to INR 10 lakh for you and your family.</li><li> Accident protection of an additional INR 10 lakh.</li><li> Life insurance worth 3x your annual salary.</li><li> INR 35,000 contribution for workspace setup.</li></ul>

sprintonweb.in

Senior GRC Consultant - Standard Frameworks The Senior GRC Consultant at Sprinto will own day-to-day GRC program maturity and delivery for standard-framework services, ensuring consistent quality across multiple client engagements. Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.
Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.
Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 3,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.
Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.
<h3>Life as a Sprinter :&nbsp;</h3>
Nobody succeeds at Sprinto by staying in their lane.
We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.
Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction.
We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.
And while we move with urgency, we never move alone.
<h3>The mission of this role :&nbsp;</h3>
Owns day-to-day GRC program maturity and delivery for Sprinto's standard-framework services — the highest-volume, highest-repeatability engine of Trust Assurance. Keeps the standard-framework playbook current, delivers consistently, and is the internal go-to for ISO 27001 / SOC 2 / GDPR / PCI DSS etc. maturity questions across Sales, SE, and CS\n Where you'll Leave Your Mark / Things You'll Build<div>
Deliver
<ul>
<li>
Own delivery for standard-framework engagements: ISO 27001 (implementation &amp; surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, audit readiness support.
</li>
<li>
Run multiple concurrent client engagements to a consistent quality bar without close supervision.
</li>
</ul>
Build reusable IP
<ul>
<li>
Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks; keep them current as frameworks revise (ISO 27001:2022 transition-type updates, SOC 2 trust criteria changes, GDPR enforcement guidance).
</li>
<li>
Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows.
</li>
</ul>
Own commercial outcomes
<ul>
<li>
Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options).
</li>
<li>
Own utilization, margin, and delivery forecasting for your own engagement book.
</li>
<li>
Partner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed.
</li>
</ul>
AI-enabled productization
<ul>
<li>
Build and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists).
</li>
<li>
Define structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output.
</li>
<li>
Set QA guardrails: mandatory source inputs, validation steps, human approval gates.
</li>
</ul>
Quality &amp; risk
<ul>
<li>
Establish acceptance criteria and review checkpoints for deliverables.
</li>
<li>
Flag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.
</li>
</ul>
</div> The kind of builder we're looking For<div>
Experience
<ul>
<li>
5+ years in GRC/security consulting or in-house compliance program ownership.
</li>
<li>
Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum.
</li>
<li>
Comfortable running several concurrent client engagements.
</li>
</ul>
Domain mastery
<ul>
<li>
Deep: ISO 27001, SOC 2 Type I/II, GDPR.
</li>
<li>
Working knowledge (nice to have): PCI DSS, HIPAA, ISO 42001 etc
</li>
</ul>
AI-enabled workflow proficiency
<ul>
<li>
Demonstrated use of AI tools to reduce manual effort and standardize deliverables.
</li>
<li>
Able to translate domain expertise into reusable templates and guided systems.
</li>
</ul>
Operator strengths
<ul>
<li>
Can own pricing/packaging, margin, and utilization for their own book without a manager doing it for them.
</li>
<li>
Strong written communication; confident running client workshops solo.
</li>
<li>
Good judgment in ambiguity, without scope creep.
</li>
</ul>
Preferred
<ul>
<li>
ISO 27001 LA/LI, CISA, or CISM.
</li>
</ul>
<h3>Success metrics</h3>
<ul>
<li>
Utilization % and gross margin on standard-framework engagements.
</li>
<li>
QA pass rate, rework rate, deliverable cycle time (benchmarked against standard-framework norms — weeks, not months).
</li>
<li>
Customer satisfaction (CSAT) on delivered engagements.
</li>
<li>
Attach rate for standard-framework services; playbook reuse rate.
</li>
</ul>
</div> You will enjoy Sprinto if<div>
<ul>
<li>
Stepping in before someone has to step up.
</li>
<li>
Wearing multiple hats without counting them.
</li>
<li>
Leaving egos at the door and winning as one team.
</li>
<li>
Taking the harder right over the easier wrong.
</li>
<li>
Shipping, learning, repeating.
</li>
<li>
Staying curious and never staying in your lane.
</li>
</div> How we care for our Sprinters<div>
<ul>
<li>
Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.
</li>
<li>
Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.
</li>
<li>
We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.
</li>
<li>
We count your spark, not your leaves: Unlimited leave so you can reset when you need to.
</li>
<li>
Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.
</li>
<li>
Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you
</li>
</div> \n
<h3>Inclusion &amp; Diversity -</h3>
<div data-qa="posting-requirements">



Sprinto is an equal opportunity employer and does not discriminate on the basis of race, colour, religion, gender, sexual orientation, age, disability, or any other protected status. You are welcome at Sprinto for who you are, and we encourage you to bring your complete selves to work. Our culture is built on the strength of diverse thinking — when people with different perspectives, ideas, and ways of solving problems come together, it fuels collaboration and accelerates our mission.
&nbsp;
At Sprinto, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. Please share your request for reasonable accommodations at any stage of the application or interview process; we want to ensure everyone feels heard and seen.




</div> Consultant Consultant sprintonweb.in internet advertising computer-software consultancy consulting consumer-internet consumers content-amp-blog-writing content-blog-writing crm customer-feedback design email-marketing enterprise-software enterprises feedback google-ads information-technology loyalty-program market-research marketing personalized-greetings sales sales-training search-marketing seo services social-media-marketing software survey telemarketing web-design website-design

As a Senior GRC Consultant, you will manage GRC program delivery for standard frameworks like ISO 27001 and SOC 2, while building reusable intellectual property and ensuring quality outcomes. You will work in a remote environment, collaborating with various teams to enhance compliance and risk management.

GRC Consultant

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers. Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks. Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 3,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks. Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more. Life as a Sprinter: Nobody succeeds at Sprinto by staying in their lane. We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in. Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction. We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching. And while we move with urgency, we never move alone.

Sprinto is seeking a Senior GRC Consultant to lead delivery for federal and complex frameworks, ensuring compliance and risk management.

Senior GRC Consultant — Federal & Complex Frameworks

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers. Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks. Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 3,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks. Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more. Life as a Sprinter: Nobody succeeds at Sprinto by staying in their lane. We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in. Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction. We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching. And while we move with urgency, we never move alone.Requirements:<ul><li> 5+ years in federal/defense-adjacent compliance consulting, or as an ISSO/ISSM, FedRAMP 3PAO assessor, or CMMC C3PAO assessor.</li><li> Has taken systems through an actual ATO, FedRAMP authorization, or CMMC certification — advisory-only experience isn't sufficient here.</li><li> FedRAMP (Moderate/High baseline), CMMC L1–L3, HITRUST r2, NIST 800-53, NIST 800-171, NIST CSF.</li><li> OSCAL/SSP structural familiarity is a plus.</li><li> Demonstrated use of AI tools to reduce manual effort and standardize deliverables.</li><li> Able to translate domain expertise into reusable templates and guided systems.</li><li> Comfortable owning pricing and margin on a lower-volume, higher-ACV book.</li><li> Excellent written communication for SSP/POA&M-grade documentation.</li><li> Strong judgment under regulatory ambiguity.</li><li> CISSP, CISA, CMMC-RP/CMMC-CCA, FedRAMP-recognized assessor training, NIST 800-171 assessor certification.</li></ul>Benefits:<ul><li> Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.</li><li> Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.</li><li> We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.</li><li> We count your spark, not your leaves: Unlimited leave so you can reset when you need to.</li><li> Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.</li><li> Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you.</li></ul>

Senior GRC Consultant — Federal & Complex Frameworks Sprinto is seeking a Senior GRC Consultant to lead delivery for federal and complex frameworks, ensuring compliance and risk management. Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers. Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks. Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 3,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks. Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more. Life as a Sprinter: Nobody succeeds at Sprinto by staying in their lane. We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in. Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction. We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching. And while we move with urgency, we never move alone. GRC Consultant Consultant sprintonweb.in internet advertising computer-software consultancy consulting consumer-internet consumers content-amp-blog-writing content-blog-writing crm customer-feedback design email-marketing enterprise-software enterprises feedback google-ads information-technology loyalty-program market-research marketing personalized-greetings sales sales-training search-marketing seo services social-media-marketing software survey telemarketing web-design website-design

Find Your Dream Remote Job

Filters

Visa Sponsorship