Senior GRC Consultant - Contract

SprintoIndia only

Apply now

Opens the original posting on Himalayas.

Apply now Source: Himalayas

Apply on the original site

Companies in this catalog do not charge applicants. Never send money to apply.

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.

Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.

Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries , Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively , including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto 's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.

Loading job…

Senior GRC Consultant - Contract at Sprinto · ApplyPick

Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows.
Own commercial outcomes
Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options).
Own utilization, margin, and delivery forecasting for your own engagement book.
Partner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed.
AI-enabled productization
Build and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists).
Define structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output.
Set QA guardrails: mandatory source inputs, validation steps, human approval gates.
Quality & risk
Establish acceptance criteria and review checkpoints for deliverables.
Flag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.
The kind of builder we're looking for -
Experience
5+ years in GRC/security consulting or in-house compliance program ownership.
Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum.
Comfortable running several concurrent client engagements.
Domain mastery
Deep: ISO 27001, SOC 2 Type I/II, GDPR.
Working knowledge (nice to have): PCI DSS, HIPAA, ISO 42001 etc
AI-enabled workflow proficiency
Demonstrated use of AI tools to reduce manual effort and standardize deliverables.
Able to translate domain expertise into reusable templates and guided systems.
Operator strengths
Can own pricing/packaging, margin, and utilization for their own book without a manager doing it for them.
Strong written communication; confident running client workshops solo.
Good judgment in ambiguity, without scope creep.
Preferred
ISO 27001 LA/LI, CISA, or CISM.
This a contract role for six months & we are looking for candidates who can join us immediately
Success metrics
Utilization % and gross margin on standard-framework engagements.
QA pass rate, rework rate, deliverable cycle time (benchmarked against standard-framework norms — weeks, not months).
Customer satisfaction (CSAT) on delivered engagements.
Attach rate for standard-framework services; playbook reuse rate.

Senior GRC Consultant - Contract

Apply now

Senior GRC Consultant - Contract

Apply now

Life as a Sprinter -

The mission -

Inclusion & Diversity -

Apply now