Senior GRC Consultant – Contract
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior GRC Consultant delivering ISO, SOC 2, and GDPR compliance programs for Sprinto’s autonomous trust platform. Building AI-assisted playbooks and owning client engagement quality, margins, and delivery.
Responsibilities:
- Own delivery for standard-framework engagements including ISO 27001 implementation and surveillance, SOC 2 Type I/II readiness, GDPR and PCI DSS compliance programs, gap assessments, control/check mapping, internal audits, policy reviews, and audit-readiness support
- Run multiple concurrent client engagements to a consistent quality bar without close supervision
- Maintain and evolve templates, control-mapping libraries, workshop agendas, and QA rubrics for standard frameworks
- Keep framework materials current as standards and guidance evolve
- Extend the library to adjacent frameworks such as HIPAA, PCI DSS, and ISO 42001 as demand grows
- Define pricing and packaging for standard-framework engagements
- Own utilization, margin, and delivery forecasting for the engagement book
- Partner with Sales, SE, and CS to attach and renew standard-framework services and support technical deal validation
- Build and maintain AI-assisted playbooks for gap assessments, control mapping, and internal audit checklists
- Define structured input forms and checklists for consistent first-draft output by junior staff or AI-assisted workflows
- Set QA guardrails, including mandatory source inputs, validation steps, and human approval gates
- Establish acceptance criteria and review checkpoints for deliverables
- Flag scope creep early and escalate ambiguous liability questions
- Serve as the internal go-to for ISO 27001, SOC 2, GDPR, and PCI DSS maturity questions across Sales, SE, and CS
- Meet success metrics covering utilization, gross margin, QA pass rate, rework rate, deliverable cycle time, CSAT, service attach rate, and playbook reuse rate
Requirements:
- 5+ years in GRC/security consulting or in-house compliance program ownership
- Hands-on delivery track record across ISO 27001, SOC 2, and GDPR at minimum
- Comfortable running several concurrent client engagements
- Deep knowledge of ISO 27001 and SOC 2 Type I/II
- Deep knowledge of GDPR
- Working knowledge of PCI DSS, HIPAA, ISO 42001, etc. is nice to have
- Demonstrated use of AI tools to reduce manual effort and standardize deliverables
- Ability to translate domain expertise into reusable templates and guided systems
- Ability to own pricing/packaging, margin, and utilization for an engagement book
- Strong written communication
- Confidence running client workshops independently
- Good judgment in ambiguous situations and ability to manage scope creep
- ISO 27001 LA/LI, CISA, or CISM preferred
- Ability to join immediately
Benefits:
- Remote work arrangement
- Inclusive and accessible hiring process
- Opportunity to work with AI-driven automation and productization
- Opportunity to build reusable intellectual property and guided systems
- Six-month contract engagement
Similar Jobs
Compliance Operations Expert
Compliance operations expert designing global fiat, crypto, and stablecoin payment compliance solutions for Bybit. Supporting licensing, regulatory strategy, and cross-border settlement across LATAM, EU, and MENA.
Senior Manager, Compliance Operations
Renew Home compliance manager overseeing SOC 2, SOX, and ISO 27001 programs. Managing audits, controls, evidence, and cross-functional security compliance operations for residential energy technology.
Compliance Advisor
Compliance Advisor securing Gainwell Technologies’ healthcare technology environment and managing SOC, NIST, HIPAA, and access-control compliance. Guiding security teams and improving enterprise security procedures.
Compliance Advisor
Compliance Advisor securing Gainwell Technologies’ healthcare technology environment. Managing audits, access controls, vulnerabilities, and corporate security compliance.
Compliance Advisor
Compliance Advisor securing Gainwell’s healthcare technology environment. Managing audits, access reviews, threat controls, and security compliance programs.
Compliance Advisor
Compliance Advisor overseeing healthcare security audits, access controls, and vulnerability management at Gainwell Technologies. Supporting safer Medicaid and healthcare technology operations.
Director, Regulatory – Carbon
Shell carbon regulatory director advising environmental products trading, RNG origination, and renewable energy businesses. Monitoring North American regulations, guiding compliance, and advocating competitive market policies.
Compliance Engineer
Compliance Engineer building automated security and compliance controls for Retell AI’s voice AI call-center platform. Supporting audits, enterprise security reviews, and scalable compliance systems.
Director, Regulatory Operations
Director overseeing Centene’s Ambetter regulatory compliance operations. Ensuring Marketplace healthcare products meet CMS, state, and federal requirements.
Compliance Officer
Nigeria Compliance Officer analyzing visa refusals and applicant risk for Global University Systems, an international education group. Improving recruitment quality, agent compliance, and UK student visa outcomes.
Compliance Officer
Compliance Officer supporting AML/KYC controls, regulatory adherence, and high-risk due diligence at Mashreq. Contributing to compliance systems, training, reporting, and bank-wide policy development.
Compliance Analyst – Senior Compliance Analyst, Special Investigations
Compliance Analyst investigating blockchain transactions and complex AML cases for OKX, a leading crypto exchange and wallet developer. Assessing illicit activity, regulatory risk, and transaction-monitoring controls.
Director of Global Trade Compliance
Director leading global trade compliance for Voyager’s space, defense, and national security technology company. Overseeing export controls, customs, sanctions, licensing, and compliance operations.
Senior Consultant, Regulatory Audit and Internal Controls
Consultor sênior conduzindo auditorias regulatórias, testes de controles e avaliações de riscos em empresas financeiras e seguradoras. Elaborando relatórios técnicos em português e inglês.
Compliance Analyst
Compliance Analyst supporting regulatory reporting, player-data analysis, and betting-integrity investigations for White Hat Gaming’s iGaming platform. Fully remote role collaborating across a global compliance team.
Manager, Policy and Compliance, Certification
Policy and Compliance Manager leading certification standards, regulatory strategy, and compliance operations at LegitScript. Guiding teams, client escalations, and jurisdictional expansion for safer internet and payment ecosystems.
Młodszy Specjalista do spraw Operacji – Compliance
Młodszy specjalista operacji podatkowo-księgowych w EY, globalnej firmie doradczo-technologicznej. Przygotowywanie deklaracji, raportów i analiz dla klientów.
Compliance Advisory Manager
First-line compliance manager supporting Griffin’s regulated fintech banking platform. Advising product, sales and operations teams through launches, lifecycle governance and regulatory change.
Senior Manager, Customer Audit & Due Diligence Compliance
Senior compliance leader overseeing customer audits, due diligence, and RFI/RFP responses for BioCatch’s behavioral biometrics fraud-prevention platform. Driving governance, quality, and workflow improvements.
Director of Governance, Risk & Compliance
GRC Director leading Atmosera’s internal compliance program and managed GRC services. Managing federal SSPs, audits, risk remediation, and technical security control alignment.