Senior GRC Consultant – Standard Frameworks

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sprinto

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2020

Automating Information Security Compliances & Privacy Laws for fast growing SaaS companies. Use Sprinto to obtain information security compliance, close enterprise deals faster, and pass vendor security assessments easily.

📋 Description

• Own delivery for standard-framework engagements: ISO 27001 (implementation & surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, audit readiness support. • Run multiple concurrent client engagements to a consistent quality bar without close supervision. • Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks; keep them current as frameworks revise (ISO 27001:2022 transition-type updates, SOC 2 trust criteria changes, GDPR enforcement guidance). • Extend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows. • Define pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options). • Own utilization, margin, and delivery forecasting for your own engagement book. • Partner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed. • Build and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists). • Define structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output. • Set QA guardrails: mandatory source inputs, validation steps, human approval gates. • Establish acceptance criteria and review checkpoints for deliverables. • Flag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.

🎯 Requirements

• 5+ years in GRC/security consulting or in-house compliance program ownership. • Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum. • Comfortable running several concurrent client engagements. • Deep: ISO 27001, SOC 2 Type I/II, GDPR. • Working knowledge (nice to have): PCI DSS, HIPAA, ISO 42001 etc. • Demonstrated use of AI tools to reduce manual effort and standardize deliverables. • Able to translate domain expertise into reusable templates and guided systems. • Can own pricing/packaging, margin, and utilization for their own book without a manager doing it for them. • Strong written communication; confident running client workshops solo. • Good judgment in ambiguity, without scope creep. • Preferred: ISO 27001 LA/LI, CISA, or CISM.

🏖️ Benefits

• Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach. • Co-working, on the house: If co-working is your jam, we offer a generous annual allowance. • We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills. • We count your spark, not your leaves: Unlimited leave so you can reset when you need to. • Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary. • Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you