{"id":1947889,"url":"https://alion.io/job/sprinto-senior-grc-consultant-contract","title":"Senior GRC Consultant","company":{"id":956,"name":"Sprinto","domain":"sprinto.com","url":"https://alion.io/company/sprinto","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":80,"open_postings":10,"ghost_share":0,"stale_share":0.6,"repost_share":0,"time_to_fill_p50_days":72,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":39000,"period":"year","method":"role_seniority_country_cell","sample_n":13},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-06T07:48:49Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-27T07:38:22Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.\nSprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.\nBacked by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.\nFounded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.\nLife as a Sprinter -\nNobody succeeds at Sprinto by staying in their lane.\nWe are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.\nBeing remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction.\nWe believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.\nAnd while we move with urgency, we never move alone.\nThe mission -\nOwns day-to-day GRC program maturity and delivery for Sprinto's standard-framework services - the highest-volume, highest-repeatability engine of Trust Assurance. Keeps the standard-framework playbook current, delivers consistently, and is the internal go-to for ISO 27001 / SOC 2 / GDPR / PCI DSS etc. maturity questions across Sales, SE, and CS\nWhere you'll leave your mark?\nDeliver\nOwn delivery for standard-framework engagements: ISO 27001 (implementation & surveillance), SOC 2 Type I/II readiness, GDPR, PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, audit readiness support.\n\nRun multiple concurrent client engagements to a consistent quality bar without close supervision.\n\nBuild reusable IP\nMaintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks; keep them current as frameworks revise (ISO 27001:2022 transition-type updates, SOC 2 trust criteria changes, GDPR enforcement guidance).\n\nExtend the library opportunistically to adjacent frameworks (HIPAA, PCI DSS, ISO 42001) as demand grows.\n\nOwn commercial outcomes\nDefine pricing/packaging for standard-framework engagements (fixed-fee tiers, retainer options).\n\nOwn utilization, margin, and delivery forecasting for your own engagement book.\n\nPartner with Sales/SE/CS to attach and renew standard-framework services; support deal conversion where technical validation is needed.\n\nAI-enabled productization\nBuild and maintain AI-assisted playbooks for standard frameworks (gap assessment, control mapping, internal audit checklists).\n\nDefine structured input forms/checklists so juniors or AI-assisted workflows produce consistent first-draft output.\n\nSet QA guardrails: mandatory source inputs, validation steps, human approval gates.\n\nQuality & risk\nEstablish acceptance criteria and review checkpoints for deliverables.\n\nFlag scope creep early; escalate ambiguous liability questions rather than absorbing them silently.\n\nThe kind of builder we're looking for -\nExperience\n5+ years in GRC/security consulting or in-house compliance program ownership.\n\nHands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum.\n\nComfortable running several concurrent client engagements.\n\nDomain mastery\nDeep: ISO 27001, SOC 2 Type I/II, GDPR.\n\nWorking knowledge (nice to have): PCI DSS, HIPAA, ISO 42001 etc\n\nAI-enabled workflow proficiency\nDemonstrated use of AI tools to reduce manual effort and standardize deliverables.\n\nAble to translate domain expertise into reusable templates and guided systems.\n\nOperator strengths\nCan own pricing/packaging, margin, and utilization for their own book without a manager doing it for them.\n\nStrong written communication; confident running client workshops solo.\n\nGood judgment in ambiguity, without scope creep.\n\nPreferred\nISO 27001 LA/LI, CISA, or CISM.\n\nSuccess metrics\nUtilization % and gross margin on standard-framework engagements.\n\nQA pass rate, rework rate, deliverable cycle time (benchmarked against standard-framework norms - weeks, not months).\n\nCustomer satisfaction (CSAT) on delivered engagements.\n\nAttach rate for standard-framework services; playbook reuse rate.","description_format":"text","description_chars":5178,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Compliance","AI Governance & Compliance"],"lifecycle":[{"event":"open","at":"2026-10-06T08:08:34Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":20,"expected_fill_days":72,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/sprinto-senior-grc-consultant-contract","json_url":"https://alion.io/job/sprinto-senior-grc-consultant-contract.json","meta":{"generated_at":"2026-10-27T10:39:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12334,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":956},"rest":"https://alion.io/mcp/rest/get_company?id=956"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsprinto-senior-grc-consultant-contract"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsprinto-senior-grc-consultant-contract"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsprinto-senior-grc-consultant-contract"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sprinto-senior-grc-consultant-contract\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsprinto-senior-grc-consultant-contract"}]}