
51 - 200 employees
Founded 2020
Automating Information Security Compliances & Privacy Laws for fast growing SaaS companies. Use Sprinto to obtain information security compliance, close enterprise deals faster, and pass vendor security assessments easily.
🔥 12 hours ago
Improve your chances of getting an interview by checking your resume score before you apply.

51 - 200 employees
Founded 2020
Automating Information Security Compliances & Privacy Laws for fast growing SaaS companies. Use Sprinto to obtain information security compliance, close enterprise deals faster, and pass vendor security assessments easily.
• Own delivery for standard-framework engagements including ISO 27001 implementation and surveillance, SOC 2 Type I/II readiness, GDPR and PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, and audit-readiness support • Run multiple concurrent client engagements to a consistent quality bar without close supervision • Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks • Keep framework materials current as standards and guidance evolve • Extend the library to adjacent frameworks such as HIPAA, PCI DSS, and ISO 42001 as demand grows • Define pricing and packaging for standard-framework engagements • Own utilization, margin, and delivery forecasting for the engagement book • Partner with Sales, SE, and CS to attach and renew standard-framework services and support technical deal validation • Build and maintain AI-assisted playbooks for gap assessments, control mapping, and internal audit checklists • Define structured input forms and checklists for consistent first-draft output by junior staff or AI-assisted workflows • Set QA guardrails, including mandatory source inputs, validation steps, and human approval gates • Establish acceptance criteria and review checkpoints for deliverables • Flag scope creep early and escalate ambiguous liability questions • Serve as the internal go-to for ISO 27001, SOC 2, GDPR, and PCI DSS maturity questions across Sales, SE, and CS • Meet success metrics covering utilization, gross margin, QA pass rate, rework rate, deliverable cycle time, CSAT, service attach rate, and playbook reuse rate
• 5+ years in GRC/security consulting or in-house compliance program ownership • Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum • Comfortable running several concurrent client engagements • Deep knowledge of ISO 27001 and SOC 2 Type I/II • Deep knowledge of GDPR • Working knowledge of PCI DSS, HIPAA, ISO 42001, etc. is nice to have • Demonstrated use of AI tools to reduce manual effort and standardize deliverables • Ability to translate domain expertise into reusable templates and guided systems • Ability to own pricing/packaging, margin, and utilization for an engagement book • Strong written communication • Confidence running client workshops independently • Good judgment in ambiguous situations and ability to manage scope creep • ISO 27001 LA/LI, CISA, or CISM preferred • Ability to join immediately
• Remote work arrangement • Inclusive and accessible hiring process • Opportunity to work with AI-driven automation and productization • Opportunity to build reusable intellectual property and guided systems • Six-month contract engagement
Apply Now🕒 September 23
GRC Consultant designing cybersecurity governance frameworks and enterprise risk assessments for an IT services company. Managing audits, vendor risk, compliance controls, and regulatory readiness.
🕒 May 11
Session Lead/Instructor at Udacity providing technical support for cyber security Nanodegree students. Engaging weekly with students and facilitating their learning journey.