Senior GRC Consultant

About the role

Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more.

What you'll do

• Own delivery for standard-framework engagements: ISO 27001 (implementation & surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs
• Run multiple concurrent client engagements to a consistent quality bar without close supervision
• Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks
• Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options)
• Own utilization, margin, and delivery forecasting for your own engagement book

What you need

• ISO 27001
• Data privacy
• Compliance
• Internal audit
• Risk management
• Any graduate

Good to have

• CISA
• CISM