Sprinto Logo

Sprinto

Senior GRC Consultant — Federal & Complex Frameworks

Reposted 16 Days Ago
Be an Early Applicant
Remote
Hiring Remotely in India
Senior level
Remote
Hiring Remotely in India
Senior level
Lead delivery of federal and complex compliance engagements (FedRAMP, CMMC, HITRUST, NIST). Provide pre-sales technical validation, build reusable control-mapping libraries, SSP and POA&M templates, and AI-assisted evidence-review playbooks. Own pricing, margins, utilization, and QA guardrails for high-stakes authorization efforts. Track framework revisions, translate changes into playbooks, and drive customer outcomes toward successful authorizations and certifications.
The summary above was generated by AI

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.

Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.

Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.

Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.

Life as a Sprinter -

Nobody succeeds at Sprinto by staying in their lane.

We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.

Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction.

We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.

And while we move with urgency, we never move alone.

The mission -

Deep technical authority for the most demanding frameworks in Sprinto's portfolio — FedRAMP, CMMC, HITRUST, and the NIST family. Owns delivery for engagements where the customer's contractual or regulatory standing (e.g., DoD eligibility, federal ATO) is directly on the line, and where mistakes are expensive and hard to reverse

Where you'll leave your mark?

    Deliver

  • Lead delivery of FedRAMP readiness/authorization support, CMMC Level 1–3 assessments and gap remediation, HITRUST r2 validated assessment preparation, NIST 800-53/800-171 control implementation and SSP development, and NIST CSF maturity assessments.

  • Provide pre-sales technical validation on federal/complex opportunities — these deals typically need scoping rigor before contract that standard-framework deals don't.

  • Build reusable IP

  • Build and maintain control-mapping libraries, SSP templates, POA&M templates, and evidence-collection playbooks calibrated to the depth federal frameworks require.

  • Track framework revisions (NIST 800-53 Rev 6, CMMC rule finalization, FedRAMP 20x, etc.) and translate changes into playbook updates promptly — these frameworks move on regulatory timelines, not product timelines.

  • Own commercial outcomes

  • Define pricing for federal/complex engagements, reflecting higher complexity and duration than standard-framework work.

  • Own margin and utilization on your engagement book; forecast capacity against a specialized, harder-to-backfill skillset.

  • AI-enabled productization

  • Build AI-assisted control-mapping and evidence-review playbooks, with heavier human-review gates than standard frameworks warrant given ATO/certification consequences.

  • Quality & risk

  • Define QA guardrails specific to federal work: accuracy is non-negotiable given the downstream consequence (loss of certification/authorization eligibility).

  • Set clear boundaries/disclaimers on what Sprinto's assessment does and doesn't guarantee toward formal certification/authorization outcomes.

The kind of builder we're looking for -

    Experience

  • 5+ years in federal/defense-adjacent compliance consulting, or as an ISSO/ISSM, FedRAMP 3PAO assessor, or CMMC C3PAO assessor.

  • Has taken systems through an actual ATO, FedRAMP authorization, or CMMC certification — advisory-only experience isn't sufficient here.

  • Domain mastery

  • FedRAMP (Moderate/High baseline), CMMC L1–L3, HITRUST r2, NIST 800-53, NIST 800-171, NIST CSF.

  • OSCAL/SSP structural familiarity is a plus.

  • AI-enabled workflow proficiency

  • Demonstrated use of AI tools to reduce manual effort and standardize deliverables.

  • Able to translate domain expertise into reusable templates and guided systems.

  • Operator strengths

  • Comfortable owning pricing and margin on a lower-volume, higher-ACV book.

  • Excellent written communication for SSP/POA&M-grade documentation.

  • Strong judgment under regulatory ambiguity.

  • Preferred

  • CISSP, CISA, CMMC-RP/CMMC-CCA, FedRAMP-recognized assessor training, NIST 800-171 assessor certification.

  • Success metrics
  • Utilization % and gross margin on federal/complex engagements (benchmarked separately from standard frameworks — expect fewer, longer engagements).

  • Delivery cycle time and QA pass rate, calibrated to 6–12+ month authorization timelines rather than weeks.

  • Customer outcome rate (successful authorization/certification progression).

  • Deal-unblock impact on federal/regulated opportunities Sales/SE couldn't close without this expertise.

How we care for our Sprinters?
  • Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.
  • Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.
  • We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.
  • We count your spark, not your leaves: Unlimited leave so you can reset when you need to.
  • Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.
  • Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you.

Inclusion & Diversity -

At Sprinto, talent, curiosity, and ownership matter more than where you come from. We hire people for the problems they can solve, the impact they create, and the way they help others succeed—not their background, identity, or personal circumstances. We believe the best teams are built when people with different perspectives come together around a shared ambition to build something meaningful.

We're proud to be an equal opportunity employer and are committed to creating a fair, inclusive, and accessible hiring process for everyone.

Similar Jobs

4 Hours Ago
Remote
India
Senior level
Senior level
Artificial Intelligence • Machine Learning • Natural Language Processing • Software • Conversational AI
Lead and build Deepgram’s go-to-market in India: own pipeline and ARR, sell to senior technical buyers, develop partner and hyperscaler channels, hire and coach a high-performing sales team, carry strategic deals, implement sales rigor, and feed market and localization insights back to product.
Top Skills: Ai/MlAPIsDeveloper ToolsFoundation ModelsHyperscaler Co-Sell ProgramsSelf-Hosted/On-Premises DeploymentsSpeech-To-Text (Stt)Systems Integrator PartnershipsText-To-Speech (Tts)Voice Ai
4 Hours Ago
Remote or Hybrid
Mumbai, Maharashtra, IND
Senior level
Senior level
Big Data • Food • Hardware • Machine Learning • Retail • Automation • Manufacturing
Lead change management for S/4 HANA and o9 planning data governance workstreams (master data, business data, analytics). Develop and execute change strategies, stakeholder engagement, training and communications, measure adoption, coach leaders, and support Ataccama deployment to embed data governance and a data-driven culture across regions.
Top Skills: AtaccamaMdmO9 PlanningSap S/4 Hana
4 Hours Ago
Remote or Hybrid
Maharashtra, IND
Senior level
Senior level
Automotive • Hardware • Robotics • Software • Transportation • Manufacturing
Develop and integrate virtual ECU components for L3 ADAS; model, simulate, and validate ECU behavior in SIL/MIL environments; integrate ADAS code with AUTOSAR, ROS2, DDS and real-time frameworks; create build pipelines (CMake/Bazel/Yocto); enable scenario-based virtual testing (CarMaker/PreScan/CARLA); debug integration issues and collaborate with cross-functional teams.
Top Skills: Autosar AdaptiveAutosar ClassicBazelC++CanCarlaCarmakerCmakeContainerized BuildsContinuous IntegrationDdsDspaceEtasEthernetHilLinMilNiPrescanRos2SilSome/IpVectorVersioningYocto

What you need to know about the Mumbai Tech Scene

From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account